Tuesday, April 23, 2013

Service Accounts Required for Installation of Team Foundation Server



The service accounts in the following table are the identities for Team Foundation Server and its components.
The service account for Team Foundation Server is also used in Internet Information Services (IIS) as the identity of the application pool for Team Foundation Server.

Component
Sample user logon name 
Requirements
Team Foundation Server
TFSSERVICE
You can specify a built-in account or a user account. If you specify a user account, it must have the Log on as a service permission.
You must not use the account that you use to install Team Foundation Server as the account for TFSSERVICE. For example, if you are logged in as domain\user1 when you install Team Foundation Server, do not use domain\user1 as the account for TFSSERVICE.
If you are using reports, you must add TFSSERVICE to the Content Manager role on the server that is running SQL Server Reporting Services. For more information, see Add the Service Account for Team Foundation Server to the Report Server.
If your SharePoint site was not installed at the same time as Team Foundation Server, you must add TFSSERVICE to the Farm Administrators group for the SharePoint Central Administration site. For more information, see Add the Service Account for Team Foundation Server to the Farm Administrators Group.
Default: Network Service
Team Foundation Build
TFSBUILD
You can specify a built-in account or a user account. If you use a user account, it must have the Log on as a service permission.
Team Foundation Server Proxy
TFSPROXY
You can specify a built-in account or a user account. If you use a user account, it must have the Log on as a service permission.

  

The report reader account is the identity that is used to gather information for reports. If you use reporting, you must specify a report reader account when you install Team Foundation Server.
If you install Team Foundation Server with the default options, the report reader account is also used as the identity of the service account for SharePoint Foundation 2010.

Feature
Sample user logon name
Requirements
Reporting
TFSREPORTS
You must specify a user account that has the Allow log on locally permission.
Default: You are prompted for this account. You cannot use a built-in account for the report reader account.


The following table lists the service accounts that are the identities that are used to run Windows services for SharePoint Products and SQL Server.
The service account for SharePoint Products is also the identity of the application pool for the SharePoint Central Administration site.

Software
Sample user logon name
Requirements
SharePoint Products
WSSSERVICE
You must specify a user account.
Default: If you install Team Foundation Server with the default options, the account that you specified as the report reader account is also used for this account.
SQL Server
SQLSERVICE
You can use a built-in system account or set up an account before you install SQL Server. Team Foundation Server has no requirements for this account.

To make it easier to discuss the different accounts that Team Foundation Server requires, this guide uses the placeholder names that are specified in the tables above. You do not have to use these placeholder names for any accounts that you might create.

Reference



No comments:

Post a Comment