To control access to MSMQ objects, MSMQ computers must log on to a Windows NT Server domain. If you choose not to use access control, MSMQ dependent clients, independent clients, and servers need not log on to a Windows NT Sever domain.
If MSMQ servers are located in different domains, the servers must trust the domains in which subordinate servers reside. In other words:
These trusts need be only one-way trusts, and there is no need for the PEC to trust domains of with BSCs of other sites are members. There is no need for any trust between The domains of which PSCs are members.
If a user accesses a server in a domain that does not trust the domain of which the user is a member, the user is considered a guest user on that server. If the guest user account is disabled on that server, that user will not be able to connect to the server.
If a user sends a message to a queue that has a restriction on who can send a message to the queue, the computer that owns the queue must be a member of a domain that trusts the domain of the user that sent the message. Otherwise the message is rejected with access denied.