Saturday, July 21, 2007

How to set (Log on as a Service Permission for TFS Accounts)

All Accounts that acts as the Team foundation Service Account has to have the Log On as a Service permission to do this after creating your new account please follow the following steps:

Using workgroup

1- click start/Administrative tools/ Local Security policy as depicted in

Figure 1: Opening local security policy
2- Expand Local Policies in the Explorer pane of the Local Security Settings window.

Click User Rights Assignment as depicted in Figure 2

Figure 2: Browsing the User Rights Assignments

2- From the Right Pane chose the permission called Long as a service and double click it. This is depicted on Figure 3.

Figure 3: Choosing the Log on as a service

3. a windows contains all users with that permission will open. Press the button called Add User or Group and write down your account name (see Figure 3). then press oK. Make sure that your user has been shown now at the list. press another ok to close the users window.

Figure 4 Chosing your Service Account

Using Active Directory

On the Windows Taskbar, click Start, and then click Run.
In the Open box, type mmc, and then click OK.
On File menu of the Console window, click Add/Remove Snap-in.
On the Add/Remove Snap-in dialog box, click Add.
On the Add Standalone Snap-in dialog box, double-click Group Policy Object Editor in the Available Standalone Snap-ins pane.
The Group Policy Wizard starts.
On the Select Group Policy Object page, click Browse.

On the Browse for a Group Policy Object dialog box, locate the policy object you want to modify, and then click OK.

Click Finish on the Select Group Policy Object page.

On the Windows taskbar, click Start, point to Administrative Tools, and then click Local Security Policy.

Expand Local Policies in the Explorer pane of the Local Security Settings window.

Click User Rights Assignment.

Double-click Log on as a service on the viewing pane.

Click Add User or Group on the Log on as a service Properties dialog box.

Type the name of the new service account in the Enter the object names to select box.

Click OK.

In order to perform what is shown below you have to be Administrator

Wednesday, July 11, 2007

TFS Active Directory Supported configurations

I have been asked many times about the supported active directory configurations for TFS so, I decided to put it here in order to be more simple to get accessed:

Supported Gonfigurations(any other configurations are not supported):
-Windows 2000 AD in Native Mode
-Windows Server 2003 AD in Windows 2000 Native functional level
-Windows Server 2003 AD in Windows Server 2003 Functional level
-Trust configurations
-Single Domain
-Single domain where the application tier is also the DC
-Default transitive 2-way trust in same forest
-Cross-forest trusts are supports

Setup will not allow you to install TeamFoundation Server on a Domain Controller