Реферат: Windows 2000 Essay Research Paper Microsoft Windows

This section describes issues related to the installation of Message Queuing.

Installing Message Queuing on Computers that Do Not Have MSMQ 1.0 Installed

This section describes issues related to the installation of Message Queuing on computers that do not have Microsoft Message Queue Server (MSMQ) 1.0 installed.

Administrative Permissions Required to Run Message Queuing Setup

The following permissions are required to install Message Queuing on a computer:

? When you install Message Queuing in either a workgroup or a domain environment, you must have local administrative permissions for the computer.

? If you are installing Message Queuing on a Windows 2000 domain controller, you must have permission to create the msmqSettings object that represents the computer on which you are installing Message Queuing. The msmqSettings object is located under the applicable server object. This applicable server object is located under the Servers object, which is located under the applicable site object in Active Directory Sites and Services.

Alternatively, you can have domain administrative permissions, or you can belong to the Domain Administrators group, which has this permission by default.

? If you are installing a Message Queuing server with routing enabled on a non﷓domain controller, you must have permission to create the applicable server object that represents the computer on which you are installing the Message Queuing server. This object is located under the Servers object, which is located under the applicable site object in Active Directory Sites and Services.

Alternatively, you can have enterprise administrative permissions, or you can belong to the Enterprise Administrators group, which has this permission by default. In addition, if?when you are prompted during Message Queuing Setup?you enter the name of a Message Queuing server that is running on a Windows 2000 domain controller in the local domain, domain administrative permissions are sufficient.

For more information about object permissions for Message Queuing, see Windows 2000 Help.

Installing Message Queuing in a Windows 2000 Workgroup

For a computer that is a member of a Windows 2000 workgroup, Message Queuing is automatically installed to operate in workgroup mode. Workgroup mode means that the ability of the computer to access Active Directory is disabled. For more information about workgroup mode, see Windows 2000 Help.

In addition, if you move a computer from a workgroup to a domain, Message Queuing automatically attempts to join the new domain. However, the new domain must be a Windows 2000 domain, and it must contain a Message Queuing server that is running on a Windows 2000 domain controller with a Global Catalog server enabled. In this case, Message Queuing operates in domain mode, which means that access to Active Directory is enabled.

Installing Message Queuing in a Windows 2000 Domain

This section describes issues related to installing Message Queuing in a domain environment.

Operating in Workgroup or Domain Mode

If you are installing Message Queuing in a domain environment, you can select whether or not the computer operates in workgroup mode (no access to Active Directory) or in domain mode (access to Active Directory) by clicking the Manually select access mode to Active Directory tab at the beginning of Message Queuing Setup.

Security Limitations for Windows 2000 Domains

All operating configurations?other than Windows 2000 domain users’ computers that are running Message Queuing on Windows 2000?introduce security limitations in Windows 2000 domains. These limitations pertain to the following operating configurations:

? In a mixed-mode domain environment where users’ computers are running MSMQ 1.0 on Windows NT 4.0, Windows 95, or Windows 98, and these computers access Message Queuing servers running on Windows 2000 domain controllers. If these users are logged on with Windows 2000 domain accounts, this limitation also applies.

? In a mixed-mode domain environment where users’ computers are running Message Queuing on Windows 2000 in a Windows NT 4.0 domain, and these computers access MSMQ 1.0 controller servers.

? In a Windows 2000 domain environment where users’ computers are running Message Queuing on Windows 2000, and these users are logged on with Windows NT 4.0 domain accounts.

? In a Windows 2000 domain environment where users’ computers support only the Internetwork Packet Exchange (IPX) protocol.

? In an environment where users are logged on with a Local User account regardless of the operating system.

If any of these operating configurations apply to your organization, then to support these users, you should weaken security for Active Directory. When Message Queuing Setup prompts you during the first installation of Message Queuing on the first Windows 2000 domain controller in your forest, select the weakened permissions option.

Specifying a Server Name During Message Queuing Setup

Message Queuing Setup may prompt you to enter the name of a server. In most cases, you should enter the name of a Message Queuing server that is running Windows 2000. You can specify the name of an MSMQ 1.0 controller server (such as the primary enterprise controller [PEC] or a primary site controller [PSC]) instead, but this scenario is supported only if you are installing an independent client. For all other installation types, Setup fails.

First Installation of Message Queuing in a Domain Must Be on a Domain Controller