5.1.2 Queue
The directory representation of a Queue ([MS-MQDMPR] section 3.1.1.2) ADM element instance can be created, deleted, read, and modified, as described in sections 3.1.6.1.2, 3.1.6.2.2, 3.1.6.3.3, 3.1.6.4.2, and 3.1.6.7.2. These operations act on an mSMQQueue ([MS-ADSC] section 2.165) Active Directory object. The default security is discussed in [MS-MQDMPR] section 3.1.7.1.3.1.
To create the directory representation of a Queue ADM element instance requires RIGHT_DS_CREATE_CHILD ([MS-ADTS] section 5.1.3.2) access on the parent mSMQConfiguration ([MS-ADSC] section 2.162) object.
To delete the directory representation of a Queue ADM element instance requires RIGHT_DS_DELETE_CHILD ([MS-ADTS] section 5.1.3.2) access on the parent object and RIGHT_DELETE ([MS-ADTS] section 5.1.3.2) access on the mSMQQueue object itself.
To read the attributes of a Queue ADM element instance requires RIGHT_GENERIC_READ ([MS-ADTS] section 5.1.3.2) access on the object.
To modify the directory representation of a Queue ADM element instance requires RIGHT_GENERIC_WRITE ([MS-ADTS] section 5.1.3.2) access on the object.