Error 0xC00E0033 when you try and install MSMQ with Active Directory Integration

As is the way, when I set up various tests with my trusty servers I bump into problems that haven't been documented before. The machines are used for many scenarios so have changed domain a few times and been upgraded every now and then. I know I should build fresh ones but the old virtual machies are handy...

Most recent issue arose when I tried to get a Windows 2008 client to install MSMQ with Active Directory Integration. The client would install in workgroup mode fine but could not create the necessary objects in directory services:

• MSMQ Event 2116
  • "Message Queuing was unable to create the msmq (MSMQ Configuration) object in Active Directory Domain Services. Error c00e0033h: %2"
• MSMQ event 2124
  • "The Message Queuing service failed to join the computer's domain 'TESTDOMAIN'. Error 0xc00e0033:"

0xc00e0033 means "MQ_ERROR_COMPUTER_DOES_NOT_SUPPORT_ENCRYPTION" 

In this particular case, the root cause was a couple of old machine key containers in the C:\Users\AllUsers\Microsoft\Crypto\RSA\MachineKeys directory. The containers are files with GUID-style names so I had to open then in Notepad one by one until I had located the ones that specifically mentioned MSMQ amongst the scrambled text.

Once I deleted these two files (and only these!) and restarted MSMQ, I was up and running with AD integration.