Home

 

Changing the password of the AMQMSRVN user account

 

If AMQMSRVN is running under the local user account MUSR_MQADMIN (or another local user account), we can change the password for the account as follows:

  1. Stop the MQSeries service from the Computer Management panel.

  2. Close any WebSphere MQ programs that are using the AMQMSRVN COM server (this includes the alert monitor, task bar, and so on).

  3. Change the MUSR_MQADMIN password in the same way that you would change an individual’s password.

  4. Use DCOMCNFG.EXE to bring up the properties pages for the IBM MQSeries services.

  5. Select the Identity Page.

  6. Modify the password given for the MUSR_MQADMIN user account.

If AMQMSRVN is running under a domain user account, we can also change the password for the account as follows:

  1. Change the password for the domain account on the domain controller. You might need to ask your domain administrator to do this for you.

  2. Use the Prepare WebSphere MQ Wizard to enter the account details including the new password.

The user account that AMQMSRVN runs under executes any MQSC commands that are issued by user interface applications, or performed automatically on system startup, shutdown, or service recovery. This user account must therefore have WebSphere MQ administration rights. By default it is added to the local mqm group on the server. If this membership is removed, the IBM MQSeries service will not work.

If a security problem arises with the DCOM configuration or with the user account that AMQMSRVN runs under, error messages and descriptions appear in the system event log. One common error is for a user not to have access or launch rights to the server. This error appears in the system log as a DCOM error with the following message description: 

Access denied attempting to launch a DCOM server.  The server is:
{55B99860-F95E-11d1-ABB6-0004ACF79B59}

 

Parent topic:

Security on Windows


fa12260_


 

Home