Change Ownership of Computer and Queue Objects

  • Article

Applies To: Windows Server 2008

Use this procedure to change ownership of computer and queue objects.

You can use this procedure to change ownership of computer and queue objects. The owner controls how permissions are set on the object and to whom permissions are granted.

Membership in <Domain>\Domain Users, or equivalent, is the minimum required to complete this procedure.

To change ownership of computer and queue objects using Active Directory Users and Computers

  1. Click Start, point to All Programs, point to Administrative Tools, and then click Active Directory Users and Computers.

  2. On the View menu, click Users, Groups, and Computers as containers, and then click Advanced Features.

  3. To change the ownership of a computer (an msmq object), in the console tree, right-click msmq.

    Where?

    • Active Directory Users and Computers/YourDomain/YourOrganizationalUnit (such as Computers or Domain Controllers)/*YourComputer/*msmq

    Or, to change the ownership of a queue, right-click the applicable queue.

    Where?

    • Active Directory Users and Computers\ YourDomain\ YourOrganizationalUnit (such as Computers or Domain Controllers)\ YourComputer\ msmq\ YourQueueFolder (Private Queues for a private queue)\ YourQueue

  4. Click Properties.

  5. On the Security page, click Advanced.

  6. On the Owner page, in Change Owner to, click a new user or group, and then click OK.

To change ownership of queue objects using Computer Management

  1. Click Start, point to Run, type compmgmt.msc, and press ENTER to display the Computer Management MMC console.

  2. In the console tree, right-click the applicable queue.

    Where?

    • Computer Management/Services and Applications/Message Queuing/YourQueueFolder (such as Public Queues or Private Queues)/YourQueue

  3. Click Properties.

  4. On the Security page, click Advanced.

  5. On the Owner page, in Change Owner to, click a new user or group, and then click OK.

Note

Membership in the local Administrators group is required to perform this task using Computer Management.

Additional considerations

  • By default, the computer account is the owner of the msmq object, unless the Routing Service feature is enabled on the server. In that case, the creator is the owner. For the queue object, the creator is the owner by default.

  • When a local user (a user not logged on to a family domain) creates an object, the Everyone group is granted Full Control permissions for the object.

  • There can be only one owner per Message Queuing computer or queue.

  • This procedure cannot be used to change the ownership of a private queue on a remote computer.

Additional references