Home
  •  

The Message Queuing server cannot determine if the local domain controller is trusted for delegation.

MSMQ.Rule.Alert.Event2123 (Rule)

Knowledge Base article:

Summary

The Message Queuing server cannot determine if the local domain controller is trusted for delegation. This may indicate a serious problem.

Causes

The Message Queuing server cannot determine if the local domain controller is trusted for delegation.

Resolutions

Enable domain controller delegation

The domain controller must have the Active Directory option Trust computer for delegation enabled.

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

Note: Make sure that this computer really should be trusted for delegation before performing this procedure, as trusting for delegation could be a security risk.

To enable delegation for the local domain controller:

Additional

For more information, see Event ID 2123 ( http://technet.microsoft.com/en-us/library/dd337409(WS.10).aspx)

Element properties:

TargetMSMQ.Server
CategoryConfigurationHealth
EnabledFalse
Event_ID2123
Event Source$Target/Property[Type="MSMQ.Server"]/ServiceName$
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
The Message Queuing server cannot determine if the local domain controller is trusted for delegation.
{0}
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="MSMQ.Rule.Alert.Event2123" Enabled="false" Target="MSMQ.Server" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>ConfigurationHealth</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>$Target/Property[Type="MSMQ.Server"]/ServiceName$</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>2123</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertOwner/>

      <AlertMessageId>$MPElement[Name="MSMQ.Rule.Alert.Event2123.AlertName"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue>$Data/EventDisplayNumber$</SuppressionValue>

        <SuppressionValue>$Data/LoggingComputer$</SuppressionValue>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>