Connecting to Team Foundation Server with a pc with no AD - tfs

So we currently have a TFS 2015 server on premise installation.
All users are registered using Active Directory account.
PC connecting to the web portal that are using AD accounts are automatically logged in since it detects the current logged in user.
My problem is we have devices that are not in AD. E.G. personal laptops that sometimes view the portal to check work items and such.
You can type in your uname and password to log in but the problem is TFS keeps asking for the uname and password every 2 minutes or so making it tedious to do anything.
Do you have any solution to this problem?

On Windows, you simply add the user and password to the Credential Manager (Control Panel\All Control Panel Items\Credential Manager) in the Windows Credential tab.
Make sure you use a recent version of Git for Windows which includes the proper Git credential manager.

Related

jenkins installation windows 10 "Service Logon Credentials"

I don't know Jenkins at all. I want to install Jenkins on Windows 10. I downloaded the installer and ran it, but I have a problem. I don't know what to enter in the "Account" and "Password" fields on the "Service Logon Credentials" stage.
if I use the username and password of my Windows account(with administrator privileges) the following information is displayed:
When installing a service to run under a domain user account, the account must have the right to logon as a service. This logon permission applies strictly to the local computer and must be granted in the Local Security Policy.
Perform the following to edit the Local Security Policy of the computer you want to define the ‘logon as a service’ permission:
Logon to the computer with administrative privileges.
Open the ‘Administrative Tools’ and open the ‘Local Security Policy’
Expand ‘Local Policy’ and click on ‘User Rights Assignment’
In the right pane, right-click ‘Log on as a service’ and select properties.
Click on the ‘Add User or Group…’ button to add the new user.
In the ‘Select Users or Groups’ dialogue, find the user you wish to enter and click ‘OK’
Click ‘OK’ in the ‘Log on as a service Properties’ to save changes.
Then try again with the added user.
(Source)
Below solution worked for me on Windows10.
Select Logon Type = Run Service as Local System ,click Install and complete the setup
To unlock Jenkins, Go to C:\Program Files\Jenkins and open jenkins.err
Get Administrator password ,paste and Install suggested plugins.
Create first admin user and start using Jenkins
Follow Chanaka Karunarathne's answer, just in the 'enter the object name to select' section enter your PC's user name. If you do not know what is your user name then just open a command prompt and run 'whoami'.
I followed this procedure to install Jenkins and it worked like a charm,
https://www.youtube.com/watch?v=1_Zs0gQq1Yc
Step1:
Download the "jenkins.war" file.
Step 2:
Run this command java -jar jenkins.war
Step 3:
Copy the secret that you get from this location,
C:\Program Files (x86)\Jenkins\secrets\initialAdminPassword
Use this Key when prompted to "Unlock Jenkins",
If you are a windows 10 home user, you need to download and install GPEdit.msc in Windows 10 Home using PowerShell script before you can use "Local Security Policy". you can download it from here.
I was be able to follow https://stackoverflow.com/users/4309588/chanaka-karunarathne's suggestion, but when it went to the next step, I tried to enter my "admin"(aka laptop login credentials), in my case I usually login with the 4-digit code to my Windows; and even if I use the password associated with the account, it would be my email as username and it's windows password as password, but I have setup two-step authentication for my email as well. it would not work.
I ended up username + 4 digit pass-code would not work on this
username(email address) + password would not work as well (due to the MFA)
I don't know why it had to be this difficult to login to Jenkins (or not sure if I should be upset about myself for setting up MFA for my email :) )
#elysium You can solve such problem by switching from Microsoft Account to Local Account for your computer. On assuming that your computer is similar to mine, you can navigate as follows;
Press/Click the Microsoft Windows tab on your keyboard.
Navigate to your profile picture and click on "Change Account Settings"
Navigate to Log in with Local Account instead and make the switch from Microsoft Account to Local Account.
Follow #Chanaka Karunarathne 's instructions. If you cannot find Local Security Policy, Go to search and type winver to confirm if you are using either of this OS versions ; Windows 10 Pro, Windows 10 Education, Windows 10 Pro Edu, Windows 10 Enterprise, Windows 10 Pro Workstation) otherwise Windows 10 Home lucks Local Security Policy, atleast for my case.
Alternatively, as mentioned in some previous comments here, to enable Group policy in Windows 10 Home, download a from here, right click on it run as administrator. Press Window Key + R, type gpedit.msc to check if Group policy has been enabled as described in this majorgeeks youtube channel (https://www.youtube.com/watch?v=7wkgwEhtqdI&ab_channel=majorgeeks)
In Windows 11, I am getting the same error even though provided user and password are correct. So I have installed Jenkins as LocalSystem.
After completion of installation, I changed it from the services and it worked for me.

TF246017: team foundation server could not connect to the database after change Domain Account password

I need your help if possible in order to resolve the issue mentioned in message subject. I have a TFS installation in two servers: one for application and another for database both on AD Domain. For security reasons I need to change the domain user account password used for this application (the user account is the AD Domain Administrator).
I changed the password from Windows AD users and computers console and after that when I tried to access to TFS (http://servername:port/tfs) I received the TF246017 error. I restored the old password for the account and TFS started to work again.
I saw that this domain user account figures in TFS Admin console, under application tier and there is an option to upgrade the password of service Account. My questions are if it is necessary to run password upgrade from there in addition to doing it from the administrator of AD users and groups option and if there is/are another option/s that I should take into account to modify the password for this user account.
Thank you in advance for your attention and your help.
Best Regards.
The error info and root cause is very clearly. You need to update the password of your corresponding account.
There are two ways to achieve the account password update:
To use the administration console to change the password
To use the TFSConfig utility to change the password:
To avoid TF246017 Error occur again, I would recommend you use the same user credential for SQL Server and TFS server. Ex: domainname/tfs is local admin to the server, sysadmin in SQL Server DB and also admin user to TFS server.
You could also check the Event log. The Windows Event Log is a good candidate where to look for the potential cause.
You need to use tfsconfig on the app tier server.
Something like tfsconfig accounts /updatepassword /account:[account name] /password:[password] should do the trick.
See also: https://learn.microsoft.com/en-us/vsts/tfs-server/admin/change-service-account-password?view=tfs-2015

TFS connection using Azure Active Directory account

So for years I've been logging into my PC using a basic Windows Live account and then using RUNAS.exe to use my AD account when launching Visual Studio and SSMS and everything worked ok. I decided to move to an AD login on my laptop so that I don't need to do the RUNAS.exe for anything I want to use my AD credentials.
Got my user setup fine, and SSMS works without a hitch. The problem is TFS and the Security Device Credential PIN. My org has it set that I have to set a Windows Hello PIN when setting up. If I login to my laptop using that option, I basically can't connect to TFS. If I use my password, I have better luck.
If I use Edge to browse to my TFS server, I'm prompted for a login and by default it asks for my Security Device Credential (PIN). It accepts it, but Edge cannot connect to the site. If I launch and using 'Other Options' and retype my account and password, it works no problem.
This is crazy. Any ideas why this would be this way? I've looked and cannot find any answers on this.
I appreciate any help!

Force password expiry has screwed Team System 2008 - how do I fix it?

Ok, once again a forced password expiry has inadvertently screwed with our TFSSERVICE and other TFS accounts, so Team System (2008) no longer works. I've picked my way through all the steps I can think of to fix the issue, and I have one issue remaining:
Here are my steps so far:
On any machine on the domain change the password for domain accounts TFSSERVICE and DEVBUILDSERVER. Note the new passwords.
On the Team Foundation Server
• Update the login password for Team Foundation Server Task Scheduler service and restart the service. (TFSSERVICE account)
• Update identity password for the application pool Microsoft Team Foundation Server Application Tool, and restart it. (TFSSERVICE account)
• Execute the command "TFSADMINUTIL changepassword domain\TFSSERVICE newpassword".
• Via a browser connect to the reporting services website (http://<TFSxx>/reports) and update the password for the TfsReportDS and the TfsOlapReportDS data sources.
On the build agent update the password for the TFSBUILD service, update the login password for the SQLEXPRESS service, and restart both services. (DEVBUILDSERVER account).
However although source control and CI builds now work, when I look at a project portal I see the following:
Remaining Work
Report Generated: 12/01/2015 13:34:32 by AS\neil; Last Warehouse Update: 28/10/2014 13:59:48
How much work is left and when will it be done?
No data matches the parameters specified.
whereas I should be seeing a graph.
What vital step have I overlooked?
TIA

When I install TFS 2010 what is the standard user name and password at /tfs?

I just installed TFS 2010. When I go to machine-name:8080/tfs on my web browser it asks for a user name and password. What is the standard user name and password? How do I set this?
It should accept all username/password combinations which are valid on the machine running TFS.
There is no default password thing. (could be that default installation only allows administrative login)
See MSDN for further information on configuring TFS 2010:
http://msdn.microsoft.com/en-us/library/ms252477.aspx
In My case it was all about firewall configuration, let me tell you what I was dealing with:
I checked out windows firewall and I saw that there was an exception for TFS But it was not enough, why? See following image:
As you can see, TFS has been excepted but not for Public
So you can tick the check box for Public or you can change your network location from Public to Home or Work, go to: Control Panel > Network and Sharing Center
Change Your network Location
Now you can simply use those Windows accounts you have and it will be accepted definitely.
Overview: What was default Username and Password again?
Assumption: You are using TFS in local network, Your own server your own client!
Short answer: As a simplest method, you should create a windows account, introduce it in TFS to grant permissions, then you can login by that account from wherever in your local network.
Long Answer:
Step1: Create one or more windows account(s), to do that, go to control panel -> User accounts -> manage another account (Create another account while you can use the account you already have) -> Create a new account ->Give it a name
Probably you may need to select administrator
Then select created account -> Create a password
Step 2:
Go to Web Portal for VS TFS 2015, click on team members (or click on the gear icon in the above bar, and go to security tab) Add -> Add windows user or group -> Browse for account you already created or simply type it to add it.
Step 3:
Go to web portal for Visual Studio Team Foundation Server 2015, through web browser by some address like http://user-pc:8080/tfs (which you can find it in your VS or TFS) just like
then you encounter a dialog box which asks you for username and password, give the credential it asks based on windows account you have created, if everything is OK and no problem with firewall it's done.
Finally:
You might see multiple users in windows welcome screen which seems annoying, to prevent windows from showing them in the welcome screen
Go to Computer -> Manage -> Local Users and Groups -> Users
double click on each one of them and remove their member of data (which is set to Users by default)
Thanks to THIS
There is none. Log in as admin on the machine. Then create a new project group etc. Define admins there (Domain integrated). Their usernames / paswords will work then.

Resources