To open a queue, both the user running the MSMQ-based application and the user account that runs the MSMQ service must be able to retrieve the queue's properties from the MQIS. If either the user running the MSMQ application or the user account used to run the MSMQ service does not have the Get Properties permission, the open operation will fail. By default, all queues are created with the Get Properties permission enabled for everyone. If you restrict this permission, ensure that the user account used to run the MSMQ service has this access permission.
In addition, the user accounts used to run the MSMQ service on every server that forwards the message also must have the Get Properties permission. Because it is not possible to predetermine message routes, all MSMQ servers should have the Get Properties permission on all queues in the enterprise.
Users need the correct permission to perform each specific action, and they need the Get Properties permission to locate queues.