I need to add a user to the "Team Foundation Service Accounts" group in TFS to be able to run the TFS Integration Tool.

I am an administrator on both the machine running TFS and the TFS Install (ie I am in the TFS Administrators group).

When I try to do that using the Team Foundation Server Administration Console the add option is grayed out.

Any ideas on how to do this?


you might want to use tfssecurity.exe command for this purpose. At least, this is the default approach. MS decided to make it not that easy to add someone to this group to keep the number of "global god-users" low. :-)

See this link for further info: http://msdn.microsoft.com/en-us/library/ms400759.aspx

  • For TFS 2008 then this is the way to do it. I had to go back and do this for my old TFS 2008 server so thanks for pointing me in the right direction. – Vaccano Jan 28 '11 at 0:36
  • Confirmed still valid with TFS2015. – GShenanigan Sep 23 '15 at 10:35

There is only one way for this.

Please use following command to add user in service accounts group:

tfssecurity /g+ "Team Foundation Service Accounts" n:domain_name\user_name /server:SERVER_URL


Wow! This one was hard to figure out. In the end I only got it due to luck (and trying a lot of different things).

Here is what you do:

  1. Open the TFS Admin Console
  2. Click on the Applciation Tier in the left tree
  3. In the "Administration Console Users" find your user (assuming it is there)
  4. Select your user, and then select "Reapply" to the right of the box
  5. Click on Advanced Features in the dialog box that appears.
  6. Make sure "Add required permissions to change service accounts" is selected.
  7. Select OK

RESULT: The user is added to the "Team Foundation Service Accounts" group

whew! Glad that is solved, I was going NUTS!


At the end of the day, aren't the service account(s) groups just local machine or domain groups? If so then add them via the local machine or domain groups.

  • Alas, no I don't see them in there. (Locally at least, I am not 100% sure about the domain level) – Vaccano Aug 25 '10 at 16:40
  • OK. I know that on our VS-TFS 2008 server there's a local group named "TFS_APPTIER_SERVICE_WPG" with the description "Service Group for Team Foundation Server" so i assumed that's what it would be on your system. – joeqwerty Aug 25 '10 at 17:21
  • My TFS 2008 server has that group too. But adding a user to it does not really add you to the group. The TFS Security command line call was the only way I could find to do this for TFS 2008 – Vaccano Jan 28 '11 at 0:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.