Why does my queued component require admin access?

[Brad Roberts]

I have a COM+ queued VB6 server component that runs on a 2003 server. The
component runs under an account that is a member of Power Users. When the
component is created in Component Services I take the default options except
that it is a queued component and I activate the Listener. The appropriate
queue is created in MSMQ with "Anonymous Logon" as the owner. In the queue
security properties I give the component account "full access".

After researching this for a while I verified that "anonymous accounts are a
member of Everyone" in the security options.

In Component Services, when I "right-click, Start" I get the following
message:
"An error occurred while processing the last operation. Error code 80080005
Server execution failed. The event log may...."

The event log has two error messages:

---------------Message Number 1 -----------------------------

An unexpected error was returned by Message Queuing API indicated.
Unable to retrieve the associated error message text.
Message Queuing API return values are defined in Platform SDK file
MQ.H.MQOpenQueue

Server Application ID: {A542FC23-CED0-47D2-AAB7-6E6AEEEC6D2E}
Server Application Instance ID:
{2AD0C433-D09E-4C3E-8CC9-9A204A17E897}
Server Application Name: MyComponentName
Error Code = 0xc00e0025 :
COM+ Services Internals Information:
File: d:\srvrtm\com\complus\src\comsvcs\qc\msmqrt\msmqrt.cpp, Line: 331
Comsvcs.dll file version: ENU 2001.12.4720.1830 shp

For more information, see Help and Support Center at

------------Number 2 ---------------

An unexpected error was returned by Message Queuing API indicated.
Unable to retrieve the associated error message text.
Message Queuing API return values are defined in Platform SDK file
MQ.H.MQOpenQueue

Server Application ID: {A542FC23-CED0-47D2-AAB7-6E6AEEEC6D2E}
Server Application Instance ID:
{2AD0C433-D09E-4C3E-8CC9-9A204A17E897}
Server Application Name: MyComponentName
The serious nature of this error has caused the process to terminate.
Error Code = 0xc00e0025 :
COM+ Services Internals Information:
File: d:\srvrtm\com\complus\src\comsvcs\qc\listener\listener2.cpp, Line: 531
Comsvcs.dll file version: ENU 2001.12.4720.1830 shp

For more information, see Help and Support Center at

All of my research points to a permission problem. However, I cannot find
anything that works except making the component account a member of the
Administrators group. This is unacceptable. I need a more specific solution
than the "shotgun method".

I have duplicated this behavior on servers inside and outside of the domain.

Does anyone have "the answer"?

Thanks

[Frank Boyne]

"Brad Roberts" <BradRober...@hotmail.com> wrote in message
news:0ACF495F-CD98-45A6...@microsoft.com...

>I have a COM+ queued VB6 server component that runs on a 2003 server. The
> component runs under an account that is a member of Power Users.

Is MSMQ installed in Workgroup or Domain mode? If workgroup, then this KB
article might be relevant. It doesn't describe exactly the same symptoms
but 0xC00E0025 is the MSMQ hresult for Access Denied which is pretty close
to permission denied.

PRB: "Permission Denied" Error When You Use Queued Components in Workgroup
Mode
http://support.microsoft.com/kb/247394/EN-US/

If you are really motivated, one possible approach would be to turn on MSMQ
diagnostics and hope that you get more detailed information from that. The
MSMQ FAQ section 15 explains how to turn on diagnostics
http://www.microsoft.com/windows2000/technologies/communications/msmq/wp_msmqfaq.asp

[Brad Roberts]

Update, resolved. Due to stupid me.

I had set the access to the queue properly. However, ONLY for the first one
created. You know the "_1","_2", etc ones that are also there? It only makes
sense that the listener would need access to them. And, by George, they need
the security settings for the component's account set, too.

Thanks for the effort....