The Message Queuing service may not be installed or may not start after you install Message Queuing with the "Active Directory Integrated" option or the "Downlevel Client Service" option enabled in Windows Server 2008

On a Windows Server 2008-based domain controller, you install Microsoft Message Queuing together with Active Directory Integrated option or the Downlevel Client Service option enabled. However, the Message Queuing service may not be installed or may not start.

This issue may occur if the default permissions in Windows Server 2008 are insufficient.

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

To resolve this issue, follow these steps:

1. On the domain controller, click Start, type dsa.msc in the Start Search box, and then click dsa in the Programs list.
   
   
   If you are prompted for an administrator password or for a confirmation, type the password, or click Continue.
2. In Active Directory Users and Computers, click View, and then click Advanced Features.
3. Open the container in which the computer object of the domain controller resides.
4. Right-click the computer object, and then click Properties.
5. Click the Security tab, click the Network Service account, and then grant the Full Control permission to the Network Service account.
6. Make sure that the Network Service account has the following permissions:
   • Create All Child Objects
   • Delete All Child Objects
7. Click Apply.
8. If it is necessary, perform a replication on the domain controller.

After you follow these steps, you can correctly install Message Queuing with the Active Directory Integrated option or the Downlevel Client Service option enabled.

If Message Queuing was already installed before you prompted the domain controller, make sure that the following registry entry is set to 0: To verify that Message Queuing is running in domain mode, expand Message Queuing in the Computer Management Microsoft Management Console (MMC) snap-in. If the Public Queues node appears, Message Queuing is running in domain mode.