If the MSMQ service is running under the local system account, all of the rights in the preceding table are granted by default. If you use Control Panel to change the user account of the MSMQ service, that account is automatically granted the "Log on as a service" right. the rest of the rights should be set with User Manager.

To grant the required rights to an account

1. Run User Manager or User Manager for Domains.
2. On the Policies menu, click User Rights.
3. Select Show Advanced User Rights.
4. Select Generate security audits from the Rights list.
5. Click Add.

6. In Add Names, type the account name in the domain\user format, Or click Show Users and then double-click the user's name.

6. Repeat this procedure for the Act as part of the operating system, Create a token object, and Increase quotas rights.

Repeat this procedure on each MSMQ controller server and each MSMQ independent client that is set to run the MSMQ service under an account other than the local system account.

© 1997 by Microsoft Corporation. All rights reserved.