How to: Add the Build Service Account to the Build Services Security Group

Before Team Foundation can connect to the new build service account, you must add it to the Build Services security group.

Required Permissions

To perform these procedures, you must be a member of the Administrators group on the Team Foundation application-tier computer, and a member of the Windows Administrators group on the build computer. For more information about permissions, see Team Foundation Server Permissions.

Adding a workgroup or domain build service account

1. In Team Explorer, select a team project that you want to associate with the new build service account.

2. On the Team menu, point to Team Project Settings, and then click Group Membership.

3. In the Project Groups on <Team Project Name> dialog box, click [<Team Project Name>]\Build Services, and then click Properties.

4. In the Team Foundation Server Group Properties dialog box, click Windows User or Group, and then click Add.

5. Confirm that Users or Groups appears in the Select this object type box. If it does not, click Object Types, select Users and Groups, and then click OK.

6. Click Locations, click the directory location where the domain or workgroup account is located, and then click OK.

7. In the Enter the object names to select box, type the name of the account that you want to use, and then click Check Names. You can also click Advanced, click Find Now, click the account that you want in the Search results list, and then click OK.

8. In the Select Users or Groups dialog box, click OK.

9. Click OK to close Team Foundation Server Group Properties and then click Close to close the Project Groups on <Team Project Name> dialog box.

10. Repeat this procedure for each team project that you want to associate with the new build service account.

Adding a network build service account

1. In Team Explorer, select a team project that you want to associate with the new build service account.

2. On the Team menu, point to Team Project Settings, and then click Group Membership.

3. In the Project Groups on <Team Project Name> dialog box, click [<Team Project Name>]\Build Services, and then click Properties.

4. In the Team Foundation Server Group Properties dialog box, click Windows User or Group, and then click Add.

5. If Visual Studio Team Foundation Build service is running on a different server than the application tier:

   1. Confirm that Computers appears in the Select this object type box. If it does not, click Object Types, select Computers, and then click OK.

   2. Confirm that the name of the domain in which the computer account resides appears in the From this location box. If it does not, click Locations, click the correct domain name, and then click OK.

   3. In the Enter the object names to select box, type the name of the computer on which Visual Studio Team Foundation Build service is running.

   4. In the Select Users or Groups dialog box, click OK.

   5. Click OK to close Team Foundation Server Group Properties and then click Close to close the Project Groups on <Team Project Name> dialog box.

6. If Visual Studio Team Foundation Build service is running on the same server as the application tier:

   1. On the Team Foundation Server application tier server, open the command prompt and move to <root>:\Program Files\Microsoft Visual Studio 2008 Team Foundation Server\tools directory.

   2. At the command prompt, type:

      TFSSecurity.exe /g+ "[TeamProject]\Build Services" "NT Authority\Network Service" /server:<Team Foundation Server URL>

      For more information, see TFSSecurity Command-Line Utility Commands

7. Repeat this procedure for each team project that you want to associate with the new build service account.

See Also

Tasks

How to: Change the Password for Visual Studio Team Foundation Build Service

How to: Set up and Install Team Foundation Build

Other Resources

NetworkService Account

Managing Team Foundation Server Services and Service Accounts