As discovered by Gautam Mansinghka:
MSMQ Service Reports "Insufficient Resources to perform this operation" when trying to create a Private Queue
don’t let people change the MSMQ storage directory default security.