Home

 

Security on Windows

 

The WebSphere MQ Explorer uses Component Object Model (COM) technology to communicate between servers and between processes on a server.

The COM server application, AMQMSRVN, is shared between any client processes that need to use the WebSphere MQ COM Services.

Because AMQMSRVN must be shared between non-interactive and interactive logon sessions, launch it under a special user account. This special user account is called MUSR_MQADMIN. When you install WebSphere MQ and run the Prepare WebSphere MQ Wizard for the first time, it creates a local user account for AMQMSRVN called MUSR_MQADMIN with the required settings and permissions. The password for MUSR_MQADMIN is randomly generated when the account is created, and used to configure the logon environment for AMQMSRVN. The generated password does not expire.

This WebSphere MQ account will not be affected by any account policies that are set up on the system to require that account passwords are changed after a certain period of time.

The password is not known outside this onetime processing and is stored by the Windows operating system in a secure part of the Registry.

• Using Active directory (Windows only)
  

• Controlling access (Windows only)
  

• Changing the password of the AMQMSRVN user account
  

 

Parent topic:

Administration using the WebSphere MQ Explorer

fa12200_

 

Home