What does HRESULT 0xC00E0021 (MQ_ERROR_ILLEGAL_SECURITY_DESCRIPTOR) mean?

 
Previous Next
MQ_ERROR_UNSUPPORTED_FORMATNAME_OPERATION MQ_ERROR_SENDERID_BUFFER_TOO_SMALL

MQ_ERROR_ILLEGAL_SECURITY_DESCRIPTOR

MQ_ERROR_ILLEGAL_SECURITY_DESCRIPTOR means that the SECURITY_DESCRIPTOR supplied for the queue operation is structurally invalid. It differs from an access-denied result: the descriptor itself cannot be accepted before Message Queuing evaluates queue permissions.

How to investigate

  • Construct the descriptor with supported Windows security APIs and validate it before passing it to Message Queuing.
  • Confirm that the descriptor, ACLs, SIDs, and size fields all describe the same allocated buffer.
  • When modifying queue security, start from a known-good descriptor and apply a minimal ACL change rather than rebuilding unrelated fields.

Microsoft: MQCreateQueue return values


Looking for a different code? Search another status or error code.