Your enterprise plan is a working document. How it is implemented and changed can be influenced by the policies that you establish. You need to do the following:
You should establish administrative policies for emergencies such as a server being corrupted, removed, or destroyed. With emergency plans, you can lessen the severity of disruptions.
You should define roles and tasks for the people administering MSMQ. You can give one administrator permissions for the entire enterprise, another administrator permission for individual sites, and another administrator permission for individual servers. You can also give an administrator permission to view, but not change the MSMQ enterprise, its elements, and its configuration.
To reduce administrative duties, you can also create a Windows NT Server global group that includes the Windows NT user accounts for all MSMQ server administrators in a site. Membership in this group gives a user all the permissions granted to the group. You can add or remove members. You can also add or remove the permissions assigned to the entire group, rather than to each user account.
If you are using multiple domains within a site, create this group in the domain where you centralize your administrative functions for the other domains. In a single master or multiple master domain model, this group and all the user accounts for MSMQ administrators should be created in the master domain.