For more information about object permissions for Message Queuing, see Windows 2000 Help.
Installing Message Queuing in a Windows 2000 Workgroup
For a computer that is a member of a Windows 2000 workgroup, Message Queuing is automatically installed to operate in workgroup mode. Workgroup mode means that the ability of the computer to access Active Directory is disabled. For more information about workgroup mode, see Windows 2000 Help.
In addition, if you move a computer from a workgroup to a domain, Message Queuing automatically attempts to join the new domain. However, the new domain must be a Windows 2000 domain, and it must contain a Message Queuing server that is running on a Windows 2000 domain controller with a Global Catalog server enabled. In this case, Message Queuing operates in domain mode, which means that access to Active Directory is enabled.
Installing Message Queuing in a Windows 2000 Domain
This section describes issues related to installing Message Queuing in a domain environment.
Operating in Workgroup or Domain Mode
If you are installing Message Queuing in a domain environment, you can select whether or not the computer operates in workgroup mode (no access to Active Directory) or in domain mode (access to Active Directory) by clicking the Manually select access mode to Active Directory tab at the beginning of Message Queuing Setup.
Security Limitations for Windows 2000 Domains
All operating configurations?other than Windows 2000 domain users’ computers that are running Message Queuing on Windows 2000?introduce security limitations in Windows 2000 domains. These limitations pertain to the following operating configurations:
? In a mixed-mode domain environment where users’ computers are running MSMQ 1.0 on Windows NT 4.0, Windows 95, or Windows 98, and these computers access Message Queuing servers running on Windows 2000 domain controllers. If these users are logged on with Windows 2000 domain accounts, this limitation also applies.
? In a mixed-mode domain environment where users’ computers are running Message Queuing on Windows 2000 in a Windows NT 4.0 domain, and these computers access MSMQ 1.0 controller servers.
? In a Windows 2000 domain environment where users’ computers are running Message Queuing on Windows 2000, and these users are logged on with Windows NT 4.0 domain accounts.
? In a Windows 2000 domain environment where users’ computers support only the Internetwork Packet Exchange (IPX) protocol.
? In an environment where users are logged on with a Local User account regardless of the operating system.
If any of these operating configurations apply to your organization, then to support these users, you should weaken security for Active Directory. When Message Queuing Setup prompts you during the first installation of Message Queuing on the first Windows 2000 domain controller in your forest, select the weakened permissions option.
Specifying a Server Name During Message Queuing Setup
Message Queuing Setup may prompt you to enter the name of a server. In most cases, you should enter the name of a Message Queuing server that is running Windows 2000. You can specify the name of an MSMQ 1.0 controller server (such as the primary enterprise controller [PEC] or a primary site controller [PSC]) instead, but this scenario is supported only if you are installing an independent client. For all other installation types, Setup fails.
First Installation of Message Queuing in a Domain Must Be on a Domain Controller
You must install Message Queuing on a Windows 2000 domain controller before you install Message Queuing software on any other computer in your domain. In addition, to support Message Queuing clients, this domain controller must have the Trust computer for delegation property enabled.
On a Windows 2000 domain controller running Windows 2000, this property is enabled by default. If this property is disabled, Message Queuing clients cannot connect to the domain controller, and the clients display symptoms similar to when a Message Queuing server is offline.
Message Queuing with Routing Enabled and Message Queuing on a Domain Controller Must Be Installed at Every Site
You must install Message Queuing on a Windows 2000 domain controller for each Windows 2000 site. In addition, you must install Message Queuing with routing enabled on a non-domain controller at every site that has Message Queuing clients; this can be installed on the same server computer. Failure to install Message Queuing and Message Queuing with routing enabled may cause messages not to reach their destinations across sites.
Also, to support MSMQ 1.0 clients running on Windows NT 4.0 in a Windows 2000 domain, you must install Message Queuing on a Windows 2000 domain controller that is configured as a Global Catalog server.
Installing Message Queuing on an IPX-Only Computer
When you install Message Queuing on an IPX-only computer that is running Windows 2000, you must enter the name of a Message Queuing server that is running on a Windows 2000 domain controller when you are prompted to do so during Setup. This server must be in the local domain.
Installing Message Queuing Using a Windows NT 4.0 Domain User Account
When you install Message Queuing on a computer that is running Windows 2000 and you use a Windows NT 4.0 domain user account, you should have at least one Message Queuing server that is running on a Windows 2000 domain controller in the local domain. If this is not possible, you must enter the name of a server that meets this criteria when you are prompted to do so during Setup.
Installing MSMQ 1.0 on Windows NT 4.0 in a Windows 2000 Domain
When you install MSMQ 1.0 on a computer that is running Windows NT 4.0 in a Windows 2000 domain, you must enter the name of a Message Queuing server in the local domain when you are prompted for the name of a PSC during Setup. This Message Queuing server must be running on a Windows 2000 domain controller that is also configured as a Global Catalog server.
In addition, if you plan to install MSMQ 1.0 on computers that are running Windows NT 4.0 in a new Windows 2000 domain, you should select the preWindows 2000 compatible check box when you run Setup for the first Windows 2000 domain controller in the local domain.
If you plan to install MSMQ 1.0 on computers that are running Windows NT 4.0 in an existing Windows 2000 domain, you should verify that the Everyone group is a member of the “pre-Windows 2000 Compatible Access” group in this domain.
? To add the Everyone group to the pre-Windows 2000 Compatible Access group
1. In the MMC, open the Active Directory Computers and Users snap-in.
2. In the console tree, double-click Builtin.
3. Right-click pre-Windows 2000 Compatible Access, and then click Properties.
4. On the Members tab, click Add, and then in the list, select Everyone (if needed).
5. Click OK.
Installing MSMQ 1.0 on Windows 95 or Windows 98 in a Windows 2000 Domain
When you install MSMQ 1.0 on a computer that is running Windows 95 or Windows 98 in a Windows 2000 domain, you must enter the name of a Message Queuing server in the local domain when you are prompted for the name of a PSC during Setup. This Message Queuing server must be running on a Windows 2000 domain controller that is also configured as a Global Catalog server.
Also, you must be granted the Create Computer Objects permission, which is located under the Computers folder object in Active Directory Users and Computers, because the computer object for these computers does not exist in Active Directory. For more information about the Create Computer Objects permission, see Windows 2000 Help.
Reinstalling Message Queuing in a Multi-Domain Environment
When you uninstall Message Queuing on a computer in a multi-domain environment, you must wait for Active Directory replication to occur before you reinstall Message Queuing on the same computer.
Installing Message Queuing on a Windows 2000 Server Cluster
Message Queuing is dependent on the Microsoft Distributed Transaction Coordinator (MS DTC) service on a server cluster. To successfully install Message Queuing on a Windows 2000 server cluster, you must first manually cluster the MS DTC service.
? To manually cluster the MS DTC service
1. Create a cluster virtual server, which is a cluster group containing a Disk resource and a Network Name resource.
2. On the computer node that hosts the cluster virtual server, run Comclust.exe, which is located in the Winnt\System32 folder.
3. Run Comclust.exe on the other nodes. Do not restart any node until Comclust.exe has been successfully started on all nodes in the server cluster.
4. Restart each computer node.
Now you can install Message Queuing on each node.
Note
The installation may fail, and a message may appear indicating that you lack the necessary permissions. In this case, grant yourself permission to create the MSMQ configuration (msmq) object, which is located under the computer object representing your cluster virtual server, and then run Message Queuing Setup again. This permission is also required to manage the cluster virtual server by using the Computer Management snap-in.
As an alternative, you can run Message Queuing Setup with an account that has domain administrative permissions. By default, domain administrative permissions include the permission to create the msmq object. This will be addressed in a future release.
Configuring Cluster Resources for Message Queuing
In Windows 2000 Help, the procedure that describes how to configure a cluster resource for Message Queuing is incorrect; you should complete Step 11 before you complete Step 10. The sequence of all the other steps is correct.
Installing Message Queuing Using Unattended Setup
When you use unattended setup to install a Message Queuing server with routing (RS installation type), the answer file script automatically attempts to resolve the site to which the computer belongs. If subnets in your network are not configured correctly, Message Queuing Setup may fail to resolve the site. In this case, you must specify the default site containing the Message Queuing server that is running on a Windows 2000 domain controller with which this server will communicate.
? To specify the default site
* Add the following entry to your unattended setup answer file:
Site = *your_domain_controller_site_name*
Upgrading MSMQ 1.0 on Computers Running Windows 2000
This section describes issues related to upgrading MSMQ 1.0 on computers that have been upgraded to the Windows 2000 operating system.
Upgrading an MSMQ 1.0 Enterprise to Windows 2000
The process of upgrading your MSMQ 1.0 enterprise to Windows 2000 is called migration. You must perform this multi-step process correctly and in the proper sequence. It is important that you understand all the issues and implications involved in migration. For specific information about the issues, preparation, and execution of migration, see “Migrating from MSMQ 1.0” on the Migration FTP site at:
ftp://ftp.microsoft.com/bussys/distapps/Msmq/Win2000/Migration/
Upgrading MSMQ 1.0 on a Server Cluster
This section provides detailed information about how to upgrade the different MSMQ 1.0 computer types on a server cluster. Unless otherwise stated, use the following general order of events to upgrade MSMQ 1.0 on all computer types on a server cluster:
1. For a clustered PEC or PSC, run the Message Queuing Upgrade wizard (Mqmig.exe). See the note below.
2. Upgrade the operating system of the node to Windows 2000 Advanced Server.
3. Upgrade the MS DTC resource.
4. Upgrade the MSMQ resource.
To upgrade a cluster node to Windows 2000 Advanced Server, the computer must be running Windows NT Server 4.0 Enterprise Edition with SP4 or SP5. Windows 2000 does not support a rolling upgrade of a Windows NT 4.0 server cluster with MSMQ 1.0 installed.
Note
When you upgrade the MSMQ resource, the Message Queuing Upgrade wizard may prompt you for the name of a server. You should enter the name of a Message Queuing server that is running on Windows 2000 rather than the name of an MSMQ 1.0 controller server such as the PEC or a PSC. Otherwise, the upgrade fails.
Upgrading the MS DTC Resource
After you upgrade the operating system on each node to Windows 2000 Advanced Server, and before you upgrade the MSMQ resource on any node, you must use Cluster Administrator to upgrade the MS DTC resource to an active/active configuration.
To upgrade the MS DTC resource on a server cluster, complete the steps in the following procedure.
? To upgrade the MS DTC resource on a server cluster
1. Take the MS DTC cluster resource offline.
2. Verify that all services dependent on the MS DTC cluster resource?including the services for Message Queuing, Component Services, Microsoft SQL Server, and Microsoft COM Transaction Integrator (COMTI)?are stopped.
3. On the node that hosts the cluster virtual server containing the MS DTC cluster resource, from the command prompt, run Comclust.exe. This program is located in the system folder (typically, C:\Winnt\System32).
4. On each of the remaining nodes, run Comclust.exe. Do not bring the MS DTC cluster resource back online until Comclust.exe is running on all nodes in the server cluster.
5. Manually restart all dependent services, and then bring the MS DTC cluster resource back online.
Upgrading the MSMQ Resource
After you successfully complete the procedure for upgrading the MS DTC resource as described in the previous topic, “Upgrading the MS DTC Resource,” use the Configure Message Queuing Cluster Resources wizard to upgrade the MSMQ resource to provide active/active fail-over support.
? To upgrade the MSMQ resource
1. Click Start, point to Programs, point to Administrative Tools, and then click Configure Your Server.
2. From Configure Your Server, click Finish Setup, and then click Configure Message Queuing Cluster Resources.
3. Follow the instructions that appear in the Configure Message Queuing Cluster Resources wizard.
You must have enterprise administrative permissions or belong to the Enterprise Administrators group to run the Configure Message Queuing Cluster Resources wizard on computers that hosted MSMQ 1.0 servers (PEC, PSC, BSC, or Routing servers) before the upgrade.
Upgrading MSMQ Routing Servers, BSCs, and Independent Clients on a Server Cluster
You should upgrade the MSMQ 1.0 routing servers and MSMQ 1.0 Backup Site Controllers (BSCs) on a server cluster to Message Queuing servers with routing enabled. You should upgrade MSMQ 1.0 independent clients to Message Queuing independent clients.
To upgrade these computers on a server cluster, complete the steps in the following procedure.
? To upgrade the MSMQ routing servers, BSCs, and independent clients on a server cluster
1. Upgrade the operating system on each node to Windows 2000 Advanced Server.
2. Use Comclust.exe to upgrade the MS DTC resource on each node.
3. Use the Configure Message Queuing Cluster Resources wizard to upgrade the MSMQ 1.0 resource on each node.
Upgrading the PEC and PSCs on a Server Cluster
In Windows 2000 Message Queuing deployment, the role of the PEC and the PSCs is delegated to Message Queuing servers running on Windows 2000 domain controllers. Because Windows 2000 domain controllers cannot be clustered, upgrading the PEC and PSCs to Windows 2000 is a multi-step process. During this process, the MSMQ Information Store (MQIS) data is imported from the PEC or PSC to a Message Queuing server that is running on a Windows 2000 domain controller located outside of the server cluster.
You must perform this upgrade process correctly and in the proper sequence. It is important that you understand all the issues and implications involved in this process. For specific information about the issues, preparation, and execution of the PEC and PSCs upgrade on a server cluster, see “Migrating from MSMQ 1.0” on the Migration FTP site at:
ftp://ftp.microsoft.com/bussys/distapps/Msmq/Win2000/Migration/
NTLM Version 2 Authentication for Windows 95 and Windows 98 Directory Services Clients
For information about how to enable and disable Windows NT LAN Manager (NTLM) version 2 and LAN Manager (LM) authentication for Windows 95 and Windows 98 Directory Services clients, visit the Knowledge Base on the Microsoft Personal Online Support Web site at:
http://support.microsoft.com/support/
Component Services
The following sections describe issues related to Windows 2000 Component Services features.
Component Services Setup
Depending on the current configuration of your operating system, you may encounter some of the following issues that relate to upgrading existing installations of Microsoft Transaction Service (MTS) and Component Services:
? If you are using either MTS 2.0, which is part of the Windows NT 4.0 Option Pack, Component Services automatically replaces MTS. All user-defined packages will be upgraded to COM+ applications. All components should work as they did under MTS 2.0.
? If you are using MTS 1.0, Component Services automatically replaces MTS. However, user-defined packages are lost, and you must re-create them.
? If you are using either MTS 1.0 or MTS 2.0 and you have installed the SDK option, the SDK files are removed. You may want to install the latest Component Services SDK, which is available with the Microsoft Platform SDK.