Problem: When setting permissions on a private MSMQueue we were getting an “Error: Access is denied.” when applying as the local administrator.
The security descriptor cannot be set. Error. Access is denied.
Unable to save permission changes on Xprivate$queue_name
Solution: Taking ownership of the queues and adding the permissions manually did not work.
Create a new default private QUEUE as the local administrator
find the file relating to the NEW queue in C:windowssystem32msmqstoragelqs
copy the Security= section from the new queues file
copy and paste the security section into the broken queues file -= stop and restart Message Queuing – edit the queue permissions as usual
JournalQuota=……. etc etc etc etc