Installing IBM MQ on Windows domain controllers in an example domain

Install and configure installations of IBM MQ on both domain controllers in the wmq.example.com domain.

The example configuration consists of three servers:

    sun
    A Windows Server 2008 server used as the first domain controller. It defines the wmq.example.com domain that contains sun, earth, and mars. It contains one instance of the multi-instance queue manager called QMGR.

    earth
    A Windows Server 2008 used as the second domain controller IBM MQ server. It contains the second instance of the multi-instance queue manager called QMGR.

    mars
    A Windows Server 2008 used as the file server.

Replace the italicized names in the example, with names of our choosing.


Before starting

  1. Do the steps in Create an Active Directory and DNS domain on Windows to create a domain controller, sun, for the domain wmq.example.com. Change the italicized names to suit your configuration.

  2. Do the steps in Adding a second Windows domain controller to an example domain to create a second domain controller, earth, for the domain wmq.example.com. Change the italicized names to suit your configuration.
  3. See Hardware and software requirements on Windows systems for other Windows versions we can run IBM MQ on.


About this task

Install and configure installations of IBM MQ on both domain controllers in the wmq.example.com domain.


Procedure

  1. Install IBM MQ on sun and earth.

    For further information, see Installing IBM MQ server on Windows .

    1. On both sun and earth, log on as the domain administrator, wmq\Administrator.
    2. Run the Setup command on the IBM MQ for Windows installation media.

      The IBM MQ Launchpad application starts.

    3. Click Software Requirements to check that the prerequisite software is installed.
    4. Click Network Configuration > No.

      We can configure either a domain user ID or not for this installation. The user ID that is created is a domain local user ID.

    5. Click IBM MQ Installation, select an installation language and click Launch IBM MQ Installer.
    6. Confirm the license agreement and click Next > Next > Install to accept the default configuration. Wait for the installation to complete, and click Finish.

      To change the name of the installation, install different components, configure a different directory for queue manager data and logs, or install into a different directory, click Custom rather than Typical.

      IBM MQ is installed, and the installer starts the Prepare IBM MQ Wizard.

    The IBM MQ for Windows installation configures a domain local group mqm, and a domain group Domain mqm. It makes Domain mqm a member of mqm. Subsequent domain controllers in the same domain share the mqm and Domain mqm groups.

  2. On both earth and sun, run the Prepare IBM MQ Wizard.

    For further information, see Configure IBM MQ with the Prepare IBM MQ Wizard.

    1. The IBM MQ installer runs the Prepare IBM MQ Wizard automatically.

      To start the wizard manually, find the shortcut to the Prepare IBM MQ Wizard in the Start > All programs > IBM MQ folder. Select the shortcut that corresponds to the installation of IBM MQ in a multi-installation configuration.

    2. Click Next and leave No clicked in response to the question Identify if there is a Windows 2000 or later domain controller in the network 1 .
    3. In the final page of the wizard, select or clear the check boxes as you require and click Finish.

    The Prepare IBM MQ Wizard creates a domain local user MUSR_MQADMIN on the first domain controller, and another domain local user MUSR_MQADMIN1 on the second domain controller. The wizard creates the IBM MQ service on each controller, with MUSR_MQADMIN or MUSR_MQADMIN1 as the user that logs on the service.

  3. Define a user that has permission to create a queue manager.

    The user must have the right to log on locally, and be a member of the domain local mqm group. On domain controllers, domain users do not have the right to log on locally, but administrators do. By default, no user has both these attributes. In this task, add domain administrators to the domain local mqm group.

    1. Open Server Manager > Roles > Active Directory Domain Services > wmq.example.com > Users.
    2. Right-click Domain Admins > Add to a group... and type mqm ; click Check names > OK > OK


Results

  1. Check that the Prepare IBM MQ Wizard created the domain user, MUSR_MQADMIN:
    1. Open Server Manager > Roles > Active Directory Domain Services > wmq.example.com > Users.
    2. Right-click MUSR_MQADMIN > Properties... > Member Of, and see that it is a member of Domain users and mqm.

  2. Check that MUSR_MQADMIN has the right to run as a service:
    1. Click Click Start > Run..., type the command secpol.msc and click OK.
    2. Open Security Settings > Local Policies > User Rights Assignments. In the list of policies, right-click Log on as a service > Properties , and see MUSR_MQADMIN is listed as having the right to log on as a service. Click OK.


What to do next

  1. Do the task, Reading and writing data and log files authorized by the local mqm group, to verify that the installation and configuration are working correctly.
  2. Go back to the task, Create a multi-instance queue manager on Windows domain controllers, to complete the task of configuring a multi-instance queue manager on domain controllers.

Parent topic: Create a multi-instance queue manager on Windows domain controllers


Related tasks


Related information

1 We can configure the installation for the domain. As all users and groups on a domain controller have domain scope, it does not make any difference. It is simpler to install IBM MQ as if it is not in domain.