We have one of our build projects that modifies the registry on the build machine (don't ask me why) and it needs to be done as administrator.
Is there some way to run msdev from the build agent as "administrator"?
We're using TFS 2012, soon to move to TFS 2013.
- Bruce
Add the build service account to the local Administrators group
Even though it's late - adding to Vian's answer, adding the account to the local Admin groups is probably the way to go here. Someone who is an Admin on the computer will have to do this.
In the start menu type in "User". It will come up as "Edit Local Users and Groups". Click on that.
In the window that just opened, Under Groups -> Administrators (double click to edit properties of Admin Group). Add the Build Machine Account.
Related
I have installed and configured TFS on my server, also I have created a project TEST in TFS. I want to ask how to add code to TFS server and then map it with code in mu local pc.
Any help?
The following should get you started:
https://msdn.microsoft.com/en-us/library/ms181384.aspx
High level overview
Open visual studio
Connect to team collection/team project
Map the team project to a folder on your local pc
Get all the files if any from tfs
Add any files from your local workspace to TFS.
Before you change permission levels for others, make sure that you have the right level of permissions.
Open the administrative context for your team project.
In the Security tab, under users, find your own name, and look at what groups you belong to and what permissions you have
If you aren't a project administrator, you need to be. Find someone who is, and have them add you.
Add user to a team project or a team, etc.
For detailed information you can refer to article below:
https://msdn.microsoft.com/en-us/library/vstudio/bb558971(v=vs.140).aspx
Our environment is a TFS 2013 server (12.0.21005.1 Tfs2013.RTM) which was upgraded from a fresh installation of TFS 2008, with a number of team projects and developers.
One thing that our developers regularly need to do is create and edit build definitions. According to both Visual Studio and all documentation I've been able to find, there should be a "Edit build definition" privilege (perhaps along with a few others) which controls access to this. But as you can see in the screenshot, it doesn't exist in our installation:
The only workaround I've found is to grant the people in question membership of the Project Administrators group, which is clearly not desirable. There is no group like build administrators or anything of the sort which might help, either; this is the list of groups available to choose from:
As a consequence, whenever a developer wants to edit a build definition (which is perfectly appropriate in our case) they keep running into:
What, short of making everyone a project administrator in every team project they might possibly work in, can I do to resolve this?
Here's where to find the security settings for build definitions.
TFS 2015 UI: Go to the Build Explorer, click on the drop down arrow to the left of All build definitions or All XAML definitions.
VS Team Services and TFS "15" RC2 and newer: Go to Build and click on the Security button in the upper right side.
You will then get a dialog like the following with the build permissions.
The permissions that you show above are for Team Projects and not builds.
If you select a build and right-click on it you should get a permissions option. Here you will find build specific permission that you are looking for.
You can also set permissions through the API with PowerShell...
We've lost our TFS and domain servers. TFS was configured to use domain accounts. We could resotre only the TFS Project Collection databases and thanks to the "TFSConfig repair" command, we finally attached them to a new TFS instance.
But all of the default security groups for repaired projects are lost (except the administrators). For example we don't have "Contributors" group anymore.
Now we want to restore these standard groups. Maybe it's possible to fix it by applying the default TFS "project proccess templates" on all existing projects and collections again.
Is there any way to address it?
As you lost the Domain server you have to follow the Move User and Service Accounts chapter of the "Move Team Foundation Server from One Environment to Another" procedure.
By the way, there's no such feature as reapplying a process template on an existing Team Project.
Have you tried to recreate at least one group that you lost? Only to know if that is working (maybe TFS will return an error because the group still exists in the database but it's not shown for whatever reason) ?
One last thing: check the TFS Scheduler Windows Service is running on the TFS Server and look for errors in the Windows Event Log.
After much messing around I've got CI implemented onto our test server. A custom workflow template builds and deploys 2 web apps (different servers), a database and a windows service. This is brill and takes all the worry out of deploying a test app.
I want to move this over to staging and live (queued manually), but doing it like this the TFS service account would need permissions on IIS for the web apps, DBOwner on the database and local admin on the service box. This is a big no-no for our tech guys!
What we could do is just give these permissions before we run the build and remove afterwards, but this means maintaining a list of what permissions to change where - ruining the convenience of one-click deployment a bit.
Ideally we'd just get the build to run using the account of the tech services guy whos got admin network-wide, is there a way to do that?
Yes you can do that via the TFS Administrator Console.
If you haven't configured your build machine, then you can choose the user during the configuration phase. You should see a Configuration Wizard page that allows you to choose a user account like this:
If your build machine is already configured, go to your build machine, then run %PROGRAMFILES%\Microsoft Team Foundation Server 2010\Tools\TfsMgmt.exe, then go to "Build Configuration", click at "Properties" link of the Build Service to open the Properties dialog, then click "stop to make changes" on the dialog, and you can change the account from the built-in account to a user one:
I just installed TFS Server 2010 on Windows 7 Ultimate.
I even managed to connect to the TFS server using Visual Studio 2010 - I didn't have to enter any login and password, as Windows Authentication was automatically used.
Now I need to add a new user to TFS, with a specific login and password, so that a member of the project could access the TFS server from the Internet.
However, I did not find a way to add a new user to TFS!
I used to work with Visual SourceSafe, and there the management of users was quite straightforward.
Any help would be appreciated!
It's a little weird in non-domain situations.
Create a new local user on your computer.
In Visual Studio, look on the Team menu for Team Project Collection settings
Add that new user to the Authorized Users group (I think-- I'm not able to access mine right now, so I'm not sure what it's called. It's something like that, though).
On the Team menu, find Team Project Settings
Add the same user to the Contributors group.
When the other user logs on, they will have to specify the TFS Application Tier computer as the domain name. For example, if you installed TFS on a computer named MyWin7Box, they would sign on as MyWin7Box\Username