Welcome to MSDN Blogs Sign in | Join | Help

Managing Team Foundation Server in a Workgroup

Managing Team Foundation Server in a workgroup environment is possible but can present some challenges. Active Directory environments are recommended for most Team Foundation Server deployments. If Team Foundation Server is to be deployed in a workgroup, it should only be deployed in workgroups with a very limited number of users and computers.

Although deploying Team Foundation Server in a workgroup means less overhead in terms of general network administrator duties, it can be problematic for Team Foundation Server administration. Local accounts must be created in Team Foundation Server for each user requiring access to Team Foundation Server and its resources. Therefore for any other than very small workgroups, the account management required for workgroups can become prohibitive.

Note   Only the single server configuration (Team Foundation application-tier and Team Foundation data-tier on the same server) is supported in a workgroup deployment. Team Foundation Build must also be installed on Team Foundation Server in a workgroup.

Team Foundation Clients and Team Foundation Server in Workgroups

Local user accounts must be created on the Team Foundation server for all users requiring access to the server.  Local user accounts must be added to Team Foundation Server server-level and project-level groups so that the users are authorized on the Team Foundation server.  When connecting from a Team Foundation client, such as Team Explorer, in the workgroup, the client user account credentials must match those of the server, or the user will be prompted for a user name and password for an account on the Team Foundation Server.

Team Foundation Clients in a Domain and Team Foundation Server in a Workgroup

Local user accounts must be created on the Team Foundation server for all users requiring access to the server.  In order to avoid users having to type a user name and password every time that a Team Foundation client must connect to Team Foundation Server, these local user accounts should use the same user name and password as the domain user names.  For example, if the Team Foundation client user's domain credentials are domainname\user1 and the local user account on the Team Foundation Server is servername\user1 with same password, the user will not be prompted for credentials when connecting to Team Foundation Server.  If they do not match, the user will be prompted for alternative credentials for Team Foundation Server that must match a local user account on that computer.

Team Foundation Clients in a Workgroup and Team Foundation Server in a Domain

Team Foundation Build must be deployed in the Team Foundation server's domain. Local user accounts must be created on the Team Foundation client computers. In order to avoid users having to type a user name and password every time that a Team Foundation client must connect to Team Foundation Server, these local user accounts need to be recreated as local accounts on the Team Foundation Server.  For example, if the Team Foundation client user's local computer credentials are computername\user1 and the local user account on the Team Foundation Server is servername\user1 with same password, the user is not prompted for credentials when connecting to Team Foundation Server.  If they do not match, the user is prompted for alternative credentials for Team Foundation Server that must match a domain account on that computer.

Published Wednesday, January 25, 2006 9:07 PM by vstsuetb

Comment Notification

If you would like to receive an email when updates are made to this post, please register here

Subscribe to this post's comments using RSS

Comments

# re: Managing Team Foundation Server in a Workgroup

Thursday, January 26, 2006 11:55 AM by Alan Stevens
Thanks for this post. My organization is deploying in the "Team Foundation Clients in a Workgroup and Team Foundation Server in a Domain" configuration.

I have noticed so far, that the tf.exe command line tool requires us to pass a username and password, while the GUI tools do not. We are also unable to create new team projects unless the user account has administrator privileges on the TFS machine.

++Alan

# re: Managing Team Foundation Server in a Workgroup

Wednesday, February 15, 2006 1:00 PM by Adrian S. Griffith
Excellent info. Thanks.

# re: Managing Team Foundation Server in a Workgroup

Wednesday, April 19, 2006 3:34 PM by Jim

Can you link TFS to a domain that is valid, but not running AD?

Answer: At this time we only support Active Directory domains. Thanks,

-=Susan

# re: Managing Team Foundation Server in a Workgroup

Friday, July 28, 2006 5:38 PM by Walter

We have installed Team Foundation Server in a Server that is part of a Domain but it was installed using a local User Account.
  We are trying to add users (clients) that belong to a Domain. (I have created local account on the Server and passwords match).
  I'm still getting a The request failed with n an HTTP status 403: TF53011: domain\UserName is not a licensed user ...
  Any idea what do we need to do to resolve this issue ????

VSTSUE answers:

The Team Foundation service account (referred to in our docs generally as TFSService) must be an account that is trusted by the Team Foundation application-tier's domain.  Moreover, the TFS service account needs to be trusted by all of the domains that contain TFS users. From the topic Trusts and Forests Considerations for Team Foundation Server (emphasis added):

"Team Foundation application-tier server services run under the TFSService account. Therefore, the Team Foundation application-tier server's domain must trust the domain to which the TFSService account belongs. Most of the time, the Team Foundation application-tier server and the TFSService account will belong to the same domain."

Hope this helps!

-=Susan

# Master of No Domain

Friday, September 22, 2006 11:38 AM by Adam Singer
I've seen several folks asking about Team Foundation Server in a non-domain (i.e. workgroup) environment....

# re: Managing Team Foundation Server in a Workgroup

Friday, October 27, 2006 3:25 PM by Jay Miller

I have installed Team Foundation Server in a Server that is part of a Domain but it was installed using a local User Account.

 I am trying to add users from a Domain. I created local account on the Server that match the username and password of the domain accounts.

 Like Walter, I'm still getting a The request failed with n an HTTP status 403: TF53011: domain\UserName is not a licensed user ...

 I have added the users as licensed user.  I never see a prompt enter a user/password, just the error.  Also, the domain is not an Active Directory domain.

Is there a way to give these domain users access?

Thanks,

Jay

Leave a Comment

(required) 
required 
(required) 
 
Page view tracker