MSMQ - Access Denied Errors

[jasonwelch01]

Hello,

I'm seeing the below error throughout the day on one of my EV Archiving servers....It's referencing 'Usboev02' which is another EV archiving server in our environment... Not sure where additional/elevated permissions need to be applied for the vault service account to see the remote msmq queue.

just a side note - our EV servers were all migrated to new windows 2008 r2 servers this past weekend....each server did retain its same host name after being migrated

Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          6/20/2011 5:08:54 AM
Event ID:      6549
Task Category: Archive Task
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      usboev09.BainCapital.LLC
Description:
Unable to monitor the status of MSMQ queue
Reason: Access is denied.  [0x80070005]
Queue: USBOEV02\Private$\Enterprise Vault Storage Archive
Check Enterprise Vault server USBOEV02 is running

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Enterprise Vault " />
    <EventID Qualifiers="32772">6549</EventID>
    <Level>3</Level>
    <Task>19</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-06-20T09:08:54.000000000Z" />
    <EventRecordID>504</EventRecordID>
    <Channel>Symantec Enterprise Vault</Channel>
    <Computer>usboev09.BainCapital.LLC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Access is denied.  [0x80070005]</Data>
    <Data>USBOEV02\Private$\Enterprise Vault Storage Archive</Data>
    <Data>Check Enterprise Vault server USBOEV02 is running</Data>
  </EventData>
</Event>

[AndrewB]

i would check and make sure that all the necessary services for EV are running on USBOEV02

[jasonwelch01]

they are.....  does the computer account need access to usboev02's msmq?

[AndrewB]

I haven't had to do that. It should be sufficient that VSA is a local admin on all your EV servers. You have the MSMQ installed in workgroup mode, right? are you able to open the remote msmq using computer manager from the other ev server?

[jasonwelch01 · Accepted solution]

i can not access the msmq queue from a remote computer...i'm wondering if this is a Window 2008 firewall issue....i  can access usboev02's msmq queue from a windows 2003 server

[AndrewB]

you might just need to flush the dns cache on the EV server that's trying to make the remote connection. maybe it's still resolving the old usboev02. it doesn't make sense that a firewall issue would allow a windows 2003 computer to access the msmq but not a windows 2008 box.

[jasonwelch01]

should be all set....from teh server i wanted to remotely monitor, ran  the following commdn 'winrm quickconfig'...this resolved issue of being abel to remotely manage another server..

thanks for your troubleshooting steps

[AndrewB]

sure thing