Microsoft MSMQ reference: Modifies the access rights of a queue manager. The syntax and selected example below are adapted from the pinned Windows Server 2025 reference. Module availability, target configuration and delegated permissions determine whether it can run in your environment. Documentation and parameter text: Microsoft, CC BY 4.0; formatting adapted by Cmdlet World. No execution testing is claimed.
Use an account with the target resource permissions documented for Set-MsmqQueueManagerACL. Modifying administrative cmdlets may require elevation or delegated administration. This catalog does not assert that ordinary users can execute the command.
Supported environments
Windows / MSMQ · Windows Server 2025 documentation; feature/module prerequisites apply
Parameters
-Allow
Specifies an array of permissions that this cmdlet grants to a user account or group. The acceptable values for this parameter are: - AllExtendedRights. All extended rights for the specified queue manager. - CreateChildObjects. Create child objects with the specified queue manager. - CreateQueue. Create a queue with the specified queue manager. - Delete. Delete queues of the specified queue manager. - DeleteChildObjects. Delete child objects from the specified queue manager. - FullControl. Full control of the specified queue manager. - GetPermissions. Get the permissions of the specified queue manager. - GetProperties. Get the properties of the specified queue manager. - ListContent. List content stored in the queues of the specified queue manager. - PeekDeadLetter. Peek a message from the specified queue manager system dead letter queue and transactional dead letter queue. - PeekJournal. Peek a message from the specified queue manager system journal queue. - ReceiveDeadLetter. Receive a message from the specified queue manager system dead letter queue and transactional dead letter queue. - ReceiveJournal. Receive a message from the specified queue manager system journal queue. - SetPermissions. Set the permissions of the specified queue manager. - SetProperties. Set the properties of the specified queue manager. - TakeOwnership. Assign a queue of the specified queue manager to oneself.
-Confirm
Prompts you for confirmation before running the cmdlet.
-Deny
Specifies an array of permissions that the cmdlet revokes from a user account or group. The acceptable values for this parameter are: - AllExtendedRights. All extended rights for the specified queue manager. - CreateChildObjects. Create child objects with the specified queue manager. - CreateQueue. Create a queue with the specified queue manager. - Delete. Delete queues of the specified queue manager. - DeleteChildObjects. Delete child objects from the specified queue manager. - FullControl. Full control of the specified queue manager. - GetPermissions. Get the permissions of the specified queue manager. - GetProperties. Get the properties of the specified queue manager. - ListContent. List content stored in the queues of the specified queue manager. - PeekDeadLetter. Peek a message from the specified queue manager system dead letter queue and transactional dead letter queue. - PeekJournal. Peek a message from the specified queue manager system journal queue. - ReceiveDeadLetter. Receive a message from the specified queue manager system dead letter queue and transactional dead letter queue. - ReceiveJournal. Receive a message from the specified queue manager system journal queue. - SetPermissions. Set the permissions of the specified queue manager. - SetProperties. Set the properties of the specified queue manager. - TakeOwnership. Assign a queue of the specified queue manager to oneself.
-Remove
Specifies an array of permissions that this cmdlet removes from a user account or group. The acceptable values for this parameter are: - AllExtendedRights. All extended rights for the specified queue manager. - CreateChildObjects. Create child objects with the specified queue manager. - CreateQueue. Create a queue with the specified queue manager. - Delete. Delete queues of the specified queue manager. - DeleteChildObjects. Delete child objects from the specified queue manager. - FullControl. Full control of the specified queue manager. - GetPermissions. Get the permissions of the specified queue manager. - GetProperties. Get the properties of the specified queue manager. - ListContent. List content stored in the queues of the specified queue manager. - PeekDeadLetter. Peek a message from the specified queue manager system dead letter queue and transactional dead letter queue. - PeekJournal. Peek a message from the specified queue manager system journal queue. - ReceiveDeadLetter. Receive a message from the specified queue manager system dead letter queue and transactional dead letter queue. - ReceiveJournal. Receive a message from the specified queue manager system journal queue. - SetPermissions. Set the permissions of the specified queue manager. - SetProperties. Set the properties of the specified queue manager. - TakeOwnership. Assign a queue of the specified queue manager to oneself.
-UserName (required)
Specifies the user account or group whose permissions the cmdlet changes.
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Prerequisites
Windows with the MSMQ module and the Windows feature or management tools that provide it. Confirm target connectivity and version compatibility using the linked Microsoft reference.
Security considerations
This cmdlet changes system state. Review every target and parameter in the official reference, test outside production, and prepare an appropriate backup or rollback. Do not execute the example automatically.
Examples
Example 1: Modify access rights for the local queue manager
This command modifies the access rights of the local queue manager. Source: Microsoft, CC BY 4.0; transcript prompt/output removed. This example was not executed.