By default, Everyone has Write permission for a computer, and the computer administrator (the person who installed the computer) has Full Control permission. With Write permission for a computer, users can retrieve the computer's permissions settings and create queues on the computer. In other words, users have Create Queue, and Get Permissions permissions.
When granted Read permission for a computer, users can receive messages from the computer's journal and dead letter queues and retrieve the computer's permissions settings. In other words, users have Receive Dead Let., Peek Dead Letter, Receive Journal, Peek Journal, and Get Permissions permissions.
When you use MSMQ Explorer to grant either Receive Dead Let. or Receive Journal permissions to a user or group, that user or group also automatically gets the corresponding Peek permission because the combination of the Receive permission without the Peek permission is not useful. You can assign the Receive permission without assigning the Peek permission only programmatically.
You can specify Full Control, Read, Write, or Special Access permissions for all users and groups. You can set the following Special Access permissions for a computer.
Table 5.4
| Special Access Permission | Use to allow a user or group to... |
| Receive Dead Let. (Rd) | Receive dead letter messages from the computer's dead letter queue. |
| Peek Dead letter (Pd) | View all dead letter messages on the computer's dead letter queue. |
| Receive Journal (Rj) | Receive journal messages from the computer's journal queue. |
| Peek Journal (Pj) | View all journal messages on the computer's journal queue. |
| Create Queue (C) | Create queues on the computer. |
| Set Properties (Sp) | Set the computer properties. |
| Delete Computer (D) | Delete the computer. |
| Get Permissions (Pg) | View computer permissions settings. |
| Set Permissions (Ps) | Change permissions for a computer. |
| Take Ownership (O) | Take ownership of the computer. |