Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need to add a user to the "Team Foundation Service Accounts" group in TFS to be able to run the TFS Integration Tool.

I am an administrator on both the machine running TFS and the TFS Install (ie I am in the TFS Administrators group).

When I try to do that using the Team Foundation Server Administration Console the add option is grayed out.

Any ideas on how to do this?

share|improve this question
add comment

4 Answers

up vote 3 down vote accepted

you might want to use tfssecurity.exe command for this purpose. At least, this is the default approach. MS decided to make it not that easy to add someone to this group to keep the number of "global god-users" low. :-)

See this link for further info: http://msdn.microsoft.com/en-us/library/ms400759.aspx

share|improve this answer
    
For TFS 2008 then this is the way to do it. I had to go back and do this for my old TFS 2008 server so thanks for pointing me in the right direction. –  Vaccano Jan 28 '11 at 0:36
add comment

Wow! This one was hard to figure out. In the end I only got it due to luck (and trying a lot of different things).

Here is what you do:

  1. Open the TFS Admin Console
  2. Click on the Applciation Tier in the left tree
  3. In the "Administration Console Users" find your user (assuming it is there)
  4. Select your user, and then select "Reapply" to the right of the box
  5. Click on Advanced Features in the dialog box that appears.
  6. Make sure "Add required permissions to change service accounts" is selected.
  7. Select OK

RESULT: The user is added to the "Team Foundation Service Accounts" group

whew! Glad that is solved, I was going NUTS!

share|improve this answer
add comment

At the end of the day, aren't the service account(s) groups just local machine or domain groups? If so then add them via the local machine or domain groups.

share|improve this answer
    
Alas, no I don't see them in there. (Locally at least, I am not 100% sure about the domain level) –  Vaccano Aug 25 '10 at 16:40
    
OK. I know that on our VS-TFS 2008 server there's a local group named "TFS_APPTIER_SERVICE_WPG" with the description "Service Group for Team Foundation Server" so i assumed that's what it would be on your system. –  joeqwerty Aug 25 '10 at 17:21
    
My TFS 2008 server has that group too. But adding a user to it does not really add you to the group. The TFS Security command line call was the only way I could find to do this for TFS 2008 –  Vaccano Jan 28 '11 at 0:37
add comment

There is only one way for this.

Please use following command to add user in service accounts group:

tfssecurity g+ "Team Foundation Service Accounts" n:domain_name\user_name /server:SERVER_URL

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.