For more information about the Allow log on locally permission, see this page on the Microsoft Web site: Allow log on locally.įor more information about required service accounts, see the topic Service Accounts and Dependencies in Team Foundation Server and also the topic " Accounts Required for Installation of Team Foundation Server" in the installation guide for Team Foundation. Therefore, you should not remove this permission if you use the same domain or workgroup account for both service accounts.įor more information about the Log on as a service permission, see this page on the Microsoft Web site: Add the Log on as a service right to an account. TFSReports does not need this permission, but the TFSService account does.
Optionally, after you use TFSConfig to specify an account to use as the TFSReports account, you can revoke its Log on as a service permission, which TFSConfig automatically grants to the TFSReports account. The TFSConfig utility does not grant this permission when it assigns the account. You must manually grant the account that you will use as the TFSReports account the Allow log on locally permission.
You can use the same utility to assign a different account to be the TFSReports account, but you might need to perform one or more of the following additional actions:īefore you assign an account to use as the TFSReports account, you must verify that it is a member of a workgroup or domain that is trusted by every computer in the deployment of Team Foundation. The TFSConfig utility changes only those services that run under the old account. You change the password or account used as the TFSReports account by using the TFSConfig command-line utility with the Accounts option. Instead, the utility updates TFS to use a different set of credentials. The TFSConfig utility does not create a new account to use as the data sources account, nor does the utility change the account password.
For example, if the password of the underlying account expires, and you assign a new password, you must change the password of the TFSReports account in TFS to match. You might need to change the password of that account, or designate a different account. The actual account name depends on your installation. TFS documentation refers to this service account by the placeholder TFSReports. You can help improve the security of Team Foundation Server (TFS) by changing the service account that it uses for the data sources for SQL Server Reporting Services or by changing the password that is used for that account. TFS acts in the security context of a service account when it retrieves project data from the data sources in SQL Server Reporting Services.
0 kommentar(er)
