Unable to access TFS 2010 from VS 2012 across a different domain - tfs

I have created a TFS project collection and a Team Project, I also have a Team Project \ Group undyer which I've added all team project users. TFS is controlled by Domain B and users will try to connect to TFS from Domain A. all TFS users have both Domain A and Domain B accounts.
When I try to connect to TFS from a machine in Domain A I get prompted for Domain B credentials the credentials popup pos twice or three times before I get an error message saying "no account information is provided..."
any idea on what TFS (Team Project or Team collection) Group shoud my users be added to?

You need to add your own new group to the TeamProject group that is called "Project Collection Valid Users", otherwise they are not allowed to acces the TFS.

Related

Create new TFS 2015 team project collection using blank database (permissions related)

I need to create a new team project collection in TFS 2015 Update 3 and I'm following this guideline.
Visual Studio Team Foundation Background Job Agent service account does not have the privilege to create databases on the DB server, and I intend to keep like this.
For this I consider:
DBA create empty database named appropriately but assign no permissions for the Team Foundation Background service account
Run “Use this existing database” in the Create Team Project Collection wizard.
I assume this will create necessary schemas/metadata in DB and allow TFSExecRole to the Team Foundation Background Job Agent service account on this new database.
Question: Is this correct?
Based on your description, you mentioned the Team Foundation Background service account should be the account which you specified to connect to the SQL Server during the TFS configuration.
You will find that the owner of the collection DB should be the user who created the collection (Right click the collection DB -> Properties -> General).
Actually, all the TFS Administrators (Add administrators to TFS) are the owner of the collection DBs (Security -> Logins -> Right click on any admin users -> properties -> User Mapping ).
So, whatever you need to use the TFS administrators account to create the NEW Collection. Just exactly following the guides: Create a team project collection

TFS 2015 permissions required to create new project?

I have two users say user Ad and user Us, Ad has admin rights and is the account used to install and configure TFS 2015, user Us is an admin which has all permissions needed for an administrator.
Now when I tried to create a new project from Visual Studio 2015 the get the below error:
Error
The Project Creation Wizard encountered an error while creating reports to the SQL Server Reporting Services on
Interestingly, my Ad account does not have SYSDBA permission on the databases when i get the error. But if i provide the SYSDBA permission to the Ad account the project creation utility works.
I want to know how is this possible? and is there a way to create a new project in TFS 2015 without having the SYSDBA permission?
Help appriciated!!!
If you just create a new project, usually you only need to be the memeber of the Project Collection Administrators Group and have the Create new projects permission set to Allow.
However, if you have SQL Server Analysis Services and SQL Server Reporting Services been configured for the deployment or a SharePoint Web application been configured for your deployment, you also need to become a member of Team Foundation Content Managers group and get Full Control permissions on the server that hosts SharePoint Products.
Has SQL Server Analysis Services and SQL Server Reporting Services been configured for the deployment?
If so, ask your administrator to add you as a member of the Team
Foundation Content Managers group on the server that hosts SQL Server
Reporting Services. Without these permissions, you’ll be unable to
create a team project.
More detail info please refer the link from MSDN: Create a team project
Permissions for TFS Team project creation:
1. Add the user to TFS Admin console users or to Project collection Admin group
2. If sharepoint is available, Add user to sharepoint Farm admin and also site collection administrators
3. If Reporting is configured, Give user Team Foundation Content Manager role.
Still if team project creation fails then Depending on the error check if user is added to TfsReports Folder security and then in to specific collection level folder security.
4. If error is related to Datasources then check if user is available at both reportDS and OlapreportDS security.
If you can give the exact error message base on that recommendations can be made. The above information is the basic requirement.

Add members to Team Foundation Server 2012

I just installed TFS on a Windows 7 64-bit and I want to add members to the team. Team members are distributed over our network and I should add them by their IP or computer name. But I don't know how to do that because when I type for example Compter-Test\User in the add member textbox I got the error TF400067 or just:
Unable to find or windows identity for Compter-Test\User
What should I do?
You can't add non AD (local) users to TFS from another machine. You either add an AD and create all the users there or you create for all the users from other machines a local user on your 'server' again (which would be separate form their local users on their workstations). You could then add these users into a workgroup and assign that workgroup to the TFS projects to simplify things.
But at the end you might be better off using VisualStudio online where you don't need to maintain a AD (free for up to 5 users).

Team Foundation Server 2012 Non Domain User Access

I am very new in Team Foundation Server.
I want to create a server at home and i want to use this server from another computer with my developer partner.
The main problem is that, i don't want to create domain users to access team foundation server. I am running an svn server and i want to migrate its data to TFS. Can non domain user (only a dedicated user like in svn server) access TFS from outside of the network?
I installed a Windows Server 2012, SQL Server 2012 and Team Foundation Server 2012. I have created a team project, then i want to connect to server from visual studio from another computer and got a standard "server unable to access" error message.
Can anybody write down the solution by step by step?
There are a few choices for collaborating in tfs:
Domain: This is the easiest to setup, user-wise. All you have to do is be a member of the domain and a member in a team project.
You have already said that you do not want this option.
Workgroup This requires you setting up the TFS server as a work group and then creating users in that workgroup that represent your team members. You then add them to your tfs team project(s). The pain part comes from you having to make sure that the username and password your team members log in with matches the work group username and password.
This is probably going to be your best bet unless you want to subscribe to visual studio online.
Visual Studio Online
This is almost as easy as the domain setup but isn't free. But connecting remotely is a good option. Plus if you are doing any cloud work it integrates nicely.
This link (http://msdn.microsoft.com/en-us/library/ms252507(v=vs.100).aspx) from Microsoft describes various domain \ work group combos. The one I describe above refers to the one where everything is in a workgroup.
Local user accounts must be created on the Team Foundation server for
all users requiring access to the server. Local user accounts must be
added to Team Foundation Server server-level and project-level groups
so that the users are authorized on the Team Foundation server. When
connecting from a Team Foundation client, such as Team Explorer, in
the workgroup, the client user account credentials must match those of
the server, or the user will be prompted for a user name and password
for an account on the Team Foundation Server.

How to add new users to TFS 2010

I have installed Visual Studio Team Foundation Server 2010 on Windows 7 Professional edition.
How can I manage (add) new users which can use the TFS 2010?
I had the same challenge. It isn't obvious how this can be done without Visual Studio but here we go... On your TFS 2010 server:
Go to Team Foundation Server
Administration Console
Navigate to your Team Project Collection
Select Group Membership from the General tab
Open Project Collection Valid Users. It should include your Team Projects's groups as
members.
Select suitable Team Project group and add your user into that group.
Since you don't have a server version of windows, you can't have a domain, so you can't add domain users to your project.
You should either install a server (which most people might recommend) or you can save your time and effort and just simply create local users on your TFS server (which can have any version of windows). This method will work just the same as installing a windows server. To do that just go to this location:
"Computer Management" -> "Local Users and Groups" -> Users
Add any users you want and in order to prevent windows from showing them in the welcome screen, double click on each one of them and remove their member of data (which is set to Users by default)
Then follow Kyberias' instructions.
Connect to a team project in VS2010.
In the Team Explorer menu expand your team project.
Right click Team Members and select Add Team Member.
From here you can add members and assign them permissions based on what they should be allowed to do on the project.
I hope this is what you are looking for.
The problem here is that there are no TFS users per se. TFS authenticates users against windows which runs it. Once you have some windows users, then you must configure permissions as mentioned by Kyberias.

Resources