This is in regard to installing Team Foundation Server for Visual Studio Team System with the TFSSETUP, TFSSERVICE, and TFSREPORTS accounts, whether they must be Admins on the local machine or Active Directory domain. It also includes my tips to installing TFS.
I'm here at Texas A&M University in the Computer Science department helping install TFS for students in the department. There are a lot of uses for it here. Dr. Salih Yurttas is a progressive teacher and would like his students to use it in his classes and student projects. The other Software Engineering classes (headed up by Dr. Dick Simmons and Dr. Mac Lively) are primarily using IBM's Rational suite, but are want to check out VSTS. And last but not least, other students are simply interested in using it for their class projects.
So I encountered quite a bit of confusion around the accounts needed for TFS' setup, services, and SQL reporting. The TFS Installation Guide is really not clear, making sound like the three recommended accounts, TFSSETUP, TFSSERVICE, and TFSREPORTS should be admins on the AD domain. Most IT shops wouldn't stand for this and it is generally a bad practice. So I did some digging around, talked to Bill Essary (the TFS Architect) & Jeff Beehler, checked out the "Team Foundation Server Administrator Permissions" MSDN article, and did a lot of trial and error. Here's what I found out...
This is in regards to installing in an Active Directory domain environment. Workgroup config is easy and not all these tips apply. Some of these may be obvious, but they are helpful to state clearly.
Note: These are NOT the complete setup instructions. They are to suplement the TFS Install Guide.
So there you have it, some clarification on setting up TFS permissions when installing. If you learn another caveat, or have a tweak to my notes, please let me know in a comment. Thanks.