Before you can use MSMQ Explorer to specify which events to audit, you must enable file and object access auditing with User Manager. You can audit success and failure audits, or both. If audits are set on an object and auditing is not enabled on the MQIS that is used for carrying out the operation, the audit message is not generated. The following table shows which computer you must enable auditing on for each action.
Table 5.10
| Action | Enable auditing |
| Peek Message, Receive Message, Peek Journal, or Receive Journal | On the computer where the queue resides. |
| Peek Computer Journal Message, Receive Computer Journal Message, Peek Dead Letter Message, Receive Dead Letter Message, or Open Connector | On the computer you want to audit. |
| Any other actions | On all MSMQ controller servers. |
When you use MSMQ Explorer to set auditing, you must have the "Manage auditing and security log" right on the MSMQ controller server that will perform the action.
When you use MSMQ Explorer to set auditing, a message may appear stating that the current audit policy does not have auditing enabled. This indicates auditing is turned off on the computer that you using╛it does not mean that auditing is turned off on the computer you are going to audit.