software upgrades
Don’t get bit by Win2008 Srvr MSMQ perms! (EV)
As environments change and grow, you may find that you want to move your MSMQ services for Enterprise Vault to a different disk. Usually this isn’t an issue, but for those folks whom are on Windows 2008 Server there’s an extra step that you may miss. Here’s an excerpt from Symantec’s support blog that describes the issue and fix:
Symptoms:
The MSMQ root and sub-directories could inherit security permissions at the destination volume resulting in one of the following symptoms:
- A1 and A2 or R1 and R2 (if Journal Archiving is enabled, J1 and J2) Private queues may disappear
- The Enterprise Vault (EV) server could be reported as “Not Available” when attempting a manual archive (A1 and A2 missing)
- Client Trace showing 0×8007005 (Access Denied) when trying to archive or restore a vaulted item
- Where Private queues are available archiving may seem to take too long to complete processing items regardless of how much the administrator tries to optimize Enterprise vault Application settings.
- The Event logs may not flag any obvious error messages on Message Queuing but some “Warning” events could contain a description string suggesting “not enough storage available to complete this operation”
Windows 2008 Procedure:
Assign MSMQ group permissions to the MSMQ storage location using the command
line, this is not possible using the GUI.
icacls ‘MSMQStoragelocationpath’ /grant “NT SERVICE\MSMQ”:(F)
Then carry out following tasks.
- Take Message queuing offline within Server Manager
- Take Message Queuing Service offline
- Change the storage file path to desired location
- Bring Message Queuing service online
- Bring Message Queuing online within Server Manager
- Validate Drive:\MSMQ\Storage location for newly created files (LQS folder and approx 5 other LG* files)
Written by: Micah Wyenn
