Applying security template files on Windows

Applying a template might affect the security settings applied to IBM MQ files and directories. If we use the highly secure template, apply it before installing IBM MQ.

Windows supports text-based security template files used to apply uniform security settings to one or more computers with the Security Configuration and Analysis MMC snap-in. In particular, Windows supplies several templates that include a range of security settings with the aim of providing specific levels of security. These templates include Compatible, Secure, and Highly Secure.

Applying one of these templates might affect the security settings applied to IBM MQ files and directories. To use the Highly Secure template, configure your machine before you install IBM MQ.

If you apply the highly secure template to a machine on which IBM MQ is already installed, all the permissions you have set on the IBM MQ files and directories are removed. Because these permissions are removed, you lose Administrator, mqm, and, when applicable, Everyone group access from the error directories.