Securing Your MSMQ Enterprise

MSMQ supports access control, auditing, authentication, and encryption to secure your MSMQ enterprise. The Access Control topic explains how to limit access to MSMQ resources on your MSMQ enterprise. The Auditing topic explains how to audit MSMQ events. The Authentication and Encryption topics explain administrative consequences and costs of using authentication and encryption.

If you do not need to set up a secure MSMQ enterprise, see the Simplified MSMQ Security topic later in this section.

This section contains:

Windows NT Domain Considerations: Describes Windows NT domain considerations if you enable access control for MSMQ.
Security Requirements and Limitations: Describes requirements for, and limitations on, using MSMQ security features.
Access Control: Describes how to set permissions for an MSMQ enterprise, site, connected network (CN), computer, and queue.
Auditing: Describes how to audit an MSMQ enterprise, site, connected network (CN), computer, queue, and log message.
Authentication: Introduces MSMQ internal and external security certificates.
Encryption: Introduces MSMQ public and private key encryption.
Securing Communication with Controller Servers: Describes how to configure MSMQ servers and clients for secure MQIS access.
Securing MSMQ Files and Folders: Describes how to use MS Message Queue in Control Panel to set MSMQ file security.
Simplified MSMQ Security: Describes how to set minimal security for your MSMQ enterprise.

This section does not contain information on:

How to implement authentication and encryption in an MSMQ-based application; see Microsoft Message Queue Server Programmer's Reference.