Had a small issue at the shop today with permissions in TFS – one of the things I still occasionally get spun up about is the different ways it handles security between TFS itself, the SharePoint portal and Reporting Services, I mean why can’t it all go based on Active Directory if it’s deployed in a domain environment or Local Groups if deployed in a Workgroup environment? Or am I just being picky?
I know I’ve heard before that when Microsoft was rolling this out there was sufficient enough feedback from the community that they didn’t want TFS “tied” to AD. Do people really have that much of a problem with AD??? I happen to like AD myself so maybe I’m biased. For those who *don’t* like AD…what don’t you like about it? And do you really like having three separate security realms to manage permissions in for something like TFS?
One thing nice that has come out of this was the recommendation to use the TFS Admin tool which at least puts a GUI wrapper around all three pieces of TFS security…and while it was a little buggy at first, it seems with version 1.1 they’ve gotten things smoothed out.
So tell me Microsoft or anyone who knows….why *did* you decide against tying TFS security to AD?
OK now that I got that out…I *did* end up solving my dilemma with TFS permissions thanks to the TFS Admin tool. Whew!