The Message Queuing service was unable to obtain the properties of the MSMQ object from Active Directory.

Summary

The Message Queuing service was unable to obtain the properties of the msmq (MSMQ Configuration) object from Active Directory

Causes

The MSMQ configuration object cannot be created in Active Directory Domain Services (AD DS). This error might be caused by one of the following conditions:

• The user who is installing Message Queuing does not have the correct permissions to create child objects in AD DS.

• Replication delays are not configured properly.

• A corrupted computer object exists in AD DS.

Resolutions

To perform these procedures, you must have membership in Administrators, or you must have been delegated the appropriate authority.

The user who is installing Message Queuing does not have the correct permissions to create child objects in AD DS

To confirm that the user who is installing Message Queuing is a domain user and a member of the local administrators security group:

• Open the Computer Management console. To open Computer Management, click Start. In the search box, type compmgmt.msc, and then press ENTER.

• In the console tree, expand System Tools, expand Local Users and Groups, and then click Groups.

• In the details pane, double-click Administrators.

• In the Members section, confirm that the user is member of this group (Administrators).

• If the user is not a member of the group, see the section titled "Grant appropriate permissions."

Replication delays are not configured properly

There is an issue with replication delays. This issue should be resolved after Active Directory replicates itself. After replication is complete, try to create the Active Directory object again:

• For smaller networks, replication should take a few minutes.

• For larger networks, the replication may take a long time.

Advanced users and domain administrators can also use the Knowledge Consistency Checker (KCC) to configure replication delays. For more information about optimizing Active Directory replication in a large network, see article 244368 in the Microsoft Knowledge Base ( http://go.microsoft.com/fwlink/?LinkId=107511).

A corrupted computer object exists in AD DS

To confirm that there are stale computer objects:

• Click Start, point to Administrative Tools, right-click Active Directory Users and Computers, and then click Run as administrator.

• On the View menu, ensure that Users, Contacts, Groups and Computers as containers is selected and that Advanced Features is selected.

• Browse to the particular computer. Check whether there are Message Queuing objects present under that computer.

• If there are Message Queuing objects and Message Queuing with Active Directory Integration is not installed on that particular computer, these objects are stale.

• If you determine that there are stale objects, refer to the following steps

Stale objects can cause issues that prevent the MSMQ Service from operating properly. Deleting stale objects may solve this problem. However, deleting a computer object in Active Directory Domain Services (AD DS) can cause problems on the client computer. Before you delete the computer object, make sure that no services that are running on the client computer will be affected. In this case, deleting the Message Queuing Active Directory object will delete public queues on that computer.

You must have the Active Directory service tools installed in Role Administration tools under Remote Server Administration.

To perform these procedures, you must have membership in Administrators, or you must have been delegated the appropriate authority.

Confirm that Active Directory service tools are installed

To confirm that Active Directory service tools are installed:

• Click Start, point to Administrative Tools, right-click Active Directory Users and Computers,and then click Run as administrator.

• Confirm that the following Active Directory tools appear in the list:

• Active Directory Domains and Trusts

• Active Directory Sites and Services

• Active Directory Users and Computers

Delete stale computer objects

To delete stale computer objects:

• Click Start, point to Administrative Tools, right-click Active Directory Users and Computers, and then click Run as administrator.

• On the View menu, ensure that Users, Contacts, Groups and Computers as Containers is selected and that Advanced Features is selected.

• Browse to the particular computer. Check whether there are Message Queuing objects present under that computer.

• If there are Message Queuing objects and Message Queuing with Active Directory Integration is not installed on that particular computer, this object is stale. Delete the particular Message Queuing Active Directory object, and then restart the MSMQ Service or, if necessary, restart the computer.

Additional

For more information, see Event ID 2120 ( http://technet.microsoft.com/en-us/library/dd337481(WS.10).aspx)