Changing the Security on MSMQ Files and Folders

On computers running Windows NT Workstation, Windows NT Server, or Windows NT Server, Enterprise Edition, all MSMQ message files, log files, and LQS files are secured on NTFS-formatted drives. If you move the files to a different folder using MS Message Queue in Control Panel, these same security settings are not copied to the new folders (because you may want to use, or may already be using, the folder to store other files).


To set the security settings on other folders to match the default security settings

  1. Using My Computer or Windows NT Explorer, right-click the folder used to store the MSMQ message files, logger files, or transaction-logger files, and then click Properties.
  2. On the Security tab, click Permissions.
    3. You can set file and folder permissions only on NTFS-formatted drives. If you select a folder on a FAT formatted drive, the Security tab is not available.
  3. Select the Replace Permissions on Existing Files check box.
    4. This check box is available only when you edit the security of a folder. Even if you are replacing permissions on existing files, the folder's security settings are used for all new files that are created in the folder after you set the security.
  4. For the local Administrators group, specify Full Control, and in Name, remove all other users and groups.

For more information on how MSMQ handles file security on the \Storage and \LQS folders, see "Securing MSMQ Files and Folders" in Chapter 5, "Securing Your MSMQ Enterprise."

© 1997 by Microsoft Corporation. All rights reserved.