What is Service Account in TFS 2010? - visual-studio-2010

I am very new in TFS 2010. I have setup my PC as server. I need to connect the client machine with this server. I have added a Service Account in TFS console. The client machine are connected with this account.
Now, my question is that, is the Service Account is intended to connect the client with server?
Can anyone explain me the purpose of this account?
Also I need to know, how to find(or setup) the TFS admin?

Are you referring to the "TFSSERVICE" service account from the installation guide? That account is used to run various services related to TFS, for example the TFS Task Scheduler. It should have the minimum privileges possible on the machine.
The client should not connect to the server with a service account, they should be using their own account which you grant access to the relevant repositories in TFS. If you connect all clients with the service account, how will you know who checked in each changeset?
You might find the installation guide of use which can be found here. See section entitled "Accounts Required for Installation of Team Foundation Components".
If you are using a domain, you should be able to follow the instructions in this article for how permissions work in TFS. You can allocate permissions to resources from the Team Explorer pane within Visual Studio.
If you're using TFS in a workgroup then it's a little different as you need to set up local accounts for your users. See this article.

Related

Install Exchange Server 2013 on Windows Server 2012 R2

I am completely new to servers. And I run into a problem that I need to install Exchange Server 2013 on my server.
When I try to install this server it gives me an error
Error:
The Active Directory schema isn't up-to-date, and this user account isn't a member of the 'Schema Admins' and/or 'Enterprise Admins' groups.
I looked through numerous tutorials and I am pretty sure that I did everything right.
As you can see my account is a member of domain admins and enterprise admins as well.
P.S. I am using Google Compute Engine
As it says, you need to add your account to Schema Admins. Add it the same way you added Enterprise Admins. Schema Admins is not inherited by Enterprise Admins, they're separate roles.

Visual Studio, add connected service does not register app in azure AD

I followed the steps as per
https://github.com/OfficeDev/O365-WebApp-MultiTenant and added the connected service. However this does not register the app under Windows Azure Active Directory Applications. I have properly linked my office 365 account into Azure. However when I add the connected service it is still empty. Is this a known issue and what is the work around?
No, this isn't a known issue. The "Add Connected Service" wizard is not generating a client ID and secret in your web.config?
As a workaround you could login to the Azure Management Portal and register the app manually, then put the client ID and secret into your web.config.
I just had the same issue and spend some hours on it. Finally it turns out that I had used a user account to log in in visual studio that was assigned to a different MS Azure account.
In my case I was using the user of production environment instead of my own developer account to log in.

Team Foundation Server Error - TFS206018 -add solution to source control

Hi I have problem add solution to TFS 2010. First I describe to you scenario.
I installed TFS 2010 on Server 2008 - machine : Zeus.
Then I created Team Project collection with TFS Admin console.
Name of Team Project collection is Pokec.sk.
I am trying add VS solution from another machine : Ares.
On machine Ares I have VS 2010.
First I configure connection to TFS 2010. On connection from VS to TFS I used credential from machine Zeus.
I used this credentials: zeus\administrator. Because I cant use credential from machine Ares.
When I tried add solution to source control I got this error:
http://www.freeimagehosting.net/cnik5
I think that I am trying add solution to TFS under credentials ares\tom and this is not allowed.
I tried edit Group Membership with TFS Admin console. But I dont know how can I add credentials from another location.
I think it is security problem of TFS. Because Ares\tom is not in Group Membership of Pokec.sk.
Machine: Zeus User: Zeus\Administrator SW: TFS 2010
Machine: Ares User:Ares\tom SW: VS 2010
how can I solve this?
You can only add users to TFS that are either users on the current workstation, or users in a domain that you are joined to (or that is in a trust relationship with the domain you are joined to.) You can't simply add users on ARES, instead you have to add a user on ZEUS and then you can authenticate as that user from ARES.
You need to create a new user on ZEUS (for example, ZEUS\tom), and then grant that user access to TFS. From ARES, you will then connect to ZEUS as ZEUS\tom, and you will be prompted for a password each time you connect.
If your goal is to avoid typing a password each time you connect, then you have two choices:
You can configure these credentials in Control Panel -> Credential Manager so that any time you connect to ZEUS, it will provide the credentials for ZEUS\tom.
You can take advantage of Windows "shadow accounts". Simply use the same username and password for the user on ZEUS as exists for a user on ARES. Then the credentials presented by ARES will match the corresponding user on ZEUS and you will be logged in automatically.

How to access VS 2010 TFS over the internet from remote office

We have a team member in a different country, and are trying to figure out the most viable option to provide them with access to our Team Foundation Server for Visual Studio 2010.
You can check this http://msdn.microsoft.com/en-us/library/bb668967.aspx
If they are part of your corporate LAN/WAN, they should be able to get access just like a local user. If they are external, you have a couple choices:
VPN: You could give them VPN access into your network, then they could access like a local user.
Expose: You could expose TFS to the outside world by allowing the appropriate ports through your firewall.
You can also take a look at the TFS Proxy, but honestly I haven't done anything with that yet.
Open up port 8080 and route that port to the appropriate server. You can also setup to use HTTPS.
When the remote user is not on the same domain, he gets prompted for the credentials. The remote user can use the Windows Credential Cache (Stored Usernames and passwords for Windows XP).
Best solution is to enable TFS through a VPN for WAN users. Through port mapping you can enable TFS application tier access, but the Sharepoint (Documents) and Reports may not work properly. So, the best method is to enable VPS with SSL, and let internet users connect to your TFS just like internal users
Best of luck!

How to get digest-authentication working on Team Foundation (2008) Project Portal sites

I am just starting out with Team Foundation Server 2008, and one of the hangups I've experienced is the following:
I create a new Team Project, as well as a Project Portal (which I believe is just a Sharepoint site). When I go to view the project portal in the browser, it prompts me for a username and password. I want it to use digest authentication (meaning it just uses my current domain credentials). I have this working on the Team Foundation site itself, but I cannot seem to get it working at all on the Project Portal sites that TFS creates for me.
Any thoughts? I've already attempted to set digest authentication on the Default Website as well as the Sharepoint Central Administration (v3) site, both of which did not fix my problem.
EDIT: I am running this on Windows Server 2003.
Check whether the pool account running the TFS sites is in your domain.
Your host may also not be in the 'Safe sites' / 'Intranet Zone' config in Internet Explorer, you can make it a trusted site and mark in the advanced options to send username and password.

Resources