Article Details
Scrape Timestamp (UTC): 2025-12-17 13:57:14.318
Source: https://www.theregister.com/2025/12/17/microsoft_admits_that_message_queuing/
Original Article Text
Click to Toggle View
Microsoft security updates breaks MSMQ on older Win systems. Folder permission changes cause queue failures and misleading error messages, no real fix yet. Microsoft has good news for administrators: while some organizations now pay for security updates on older Windows versions, the inconsistent quality remains free. The company has confirmed that Message Queuing (MSMQ) might fail on some Windows 10 devices and on older versions of Windows Server after installing the December 2025 Security update. The problems include MSMQ queues becoming inactive, Internet Information Services (IIS) sites failing with "Insufficient resources to perform operation" errors, and applications failing to write to queues. To compound the problem, logs are stuffed with misleading errors such as "There is insufficient disk space or memory" despite there being plenty of both. The glitch is actually to do with folder permissions and where MSMQ wants write access. In its documentation for the issue, Microsoft said: "This issue is caused by the recent changes introduced to the MSMQ security model and NTFS permissions on the C:\Windows\System32\MSMQ\storage folder. MSMQ users now require write access to this folder, which is normally restricted to administrators. "As a result, attempts to send messages via MSMQ APIs might fail with resource errors." It also impacts clustered MSMQ environments under load. According to Microsoft, the defect impacts Windows 10 22H2 and earlier (up to 1607), and Windows Server 2012 to 2019. "Individuals using Windows Home or Pro editions on personal devices are very unlikely to experience this issue. This issue primarily affects enterprise or managed IT environments." Microsoft suggested contacting its support team for a workaround. Other users reported that uninstalling the update also did the trick, though doing so would mean losing the security fixes it contained. MSMQ has been around for decades in one form or another, and can trace its lineage back to the days of Windows 95 and NT4. It is a messaging protocol that allows applications to communicate in a failsafe manner by queuing messages until they can be sent and received. A failure of MSMQ can result in a raft of applications stopping working. Fortunately, only Microsoft's older operating systems are affected. Unfortunately, these are the ones that tend to be kept alive by enterprises deferring the pain and expense of upgrading, or following the "if it ain't broke, don't fix it" philosophy. Alas, the truism probably needs an update these days: "if it ain't broke, don't fix it. Until Microsoft breaks it…"
Daily Brief Summary
Microsoft's December 2025 security update causes MSMQ failures on Windows 10 and older Windows Server versions, affecting enterprise environments relying on these systems.
Issues include MSMQ queues becoming inactive, IIS site failures, and misleading error logs indicating insufficient resources despite adequate disk space and memory.
The root cause is linked to changes in MSMQ's security model and NTFS permissions, requiring write access to a folder typically restricted to administrators.
Impacted systems include Windows 10 versions 22H2 and earlier, and Windows Server 2012 to 2019, primarily affecting enterprise or managed IT environments.
Microsoft advises contacting support for workarounds, though some users found uninstalling the update resolves the issue, at the cost of losing security fixes.
MSMQ's failure can disrupt numerous applications, highlighting the risks of maintaining older systems in enterprise settings.
The incident serves as a reminder of the challenges in balancing security updates with system stability, especially in legacy environments.