I am pleased to announce that my Guide Upgrading TFS 2010 to TFS 2012 with Migration to a New Hardware just published on CodePlex.
We can reserve Lab environment by mark it as ‘In Use’ to discourage other team members from using it but remember this doesn’t prevent access by other team members, but it just simply sets a flag in Lab Center environment list.
So we have to make sure that the environment is free for us to use, so we could decide to run some tests on it. Sometimes the environment belong to specific team so we have to ask them if it is OK for us to use.
When creating SCVMM Environment for Lab Management 2013 over SCVMM 2012 R2, you must select at least one VHDD and marked as ‘Contains an operating system‘
If you can’t find the ISO of the Visual Studio Update you can download the update instead of install it from the internet, just perform the following steps:
The Visual Studio update installs on top of whatever is already installed on the computer, so you will find Visual Studio Update N media or installation file. Most of Visual Studio updates are cumulative releases that include the new features and fixes that were delivered in previous releases.
The TFS update is a full layout that replaces whatever is installed on the computer, so you will always find TFS with Update N media. Before you try to apply the TFS update, make sure that you have a full backup of your current databases. If the TFS update installation fails, you will be unable to restart the update or roll back to the earlier version of TFS without performing a restore procedure.
To simplify the meaning, just think of TFS update as it’s a new version of TFS so it’s Upgrade the existing one and this is the reason for after you install the update you will find the configuration show you upgrade wizard.
For example, see the following post about how to Install TFS 2012 Update 3
In this post I will explain a step-by-step installation and configuration for TFS 2012 Update 3 (TFS 2012.3)
- Download the TFS with Update 3
- Download Agents for Visual Studio 2012 Update 3
- Download Visual Studio 2012 Update 3
- More info about Update 3
Insert the VS2012.3 TFS Server ENU media in your machine and click on tfs_server.exe.
Notice that you can’t change the path since it detects the previous installation (TFS 2012.2).
The configuration detect the DB, click on the confirmation of the DB backup, this is very important because If the TFS update installation fails, you will be unable to restart the update or roll back to the earlier version of TFS without performing a restore procedure. Click on Next.
I am really pleased to announce that I have been renewed as a Microsoft MVP for Visual Studio ALM for the next year, actually it’s an amazing to be part of such a community and to belong to this wonderful group.
Thanks Microsoft for such award!
Using TFS as a client need a TFS Client Access License (CAL), in old version of TFS (TFS 2010) there was a built in group called TFS Work Item Only View (WIOV) that we can use for all people that we don’t want them to have CAL and they will be able to create work items and only see what they created, see the following image from TFS 2010.
In TFS 2012 and TFS 2013, this was introduce through Access Level it’s also controlled the features that we want to enable for them not only from license perspective but also from security or restriction perspective as well.
Remember that we can change the default Access Level so I don’t need every time to create a project to go to Access Level and assign this level.
TFS Service accounts one of the very important topic when working with TFS installation and configuration, because each service needs to run with account that might has different permissions, it preferred to use different service accounts, but you can still use the same domain or workgroup account for all services or you might use the system account like Network Service, an example of reason for using Network Service that you don’t need to worry about service interruption because changing the password policy.
But as best practices and for better security reasons, we should use service accounts but to understand service accounts let’s start from the beginning.
What are service accounts and why we need them?
To understand the answer, let’s think about why we need user accounts in the first place?
We need user accounts so multiple users can log-in into the system and has different privileges over the existing resources and applications, and also for network resources, see the following image.
What if I want to run an application or in another word a background process (Service) without needing to any user to log-in and without using any user account for our users with his/her password? , See the following image.
So we need to create user accounts for our services (services accounts). Is that mean I have to create them?
No, there are some built-in user accounts without password and you can use them directly and each built-in account has different properties and different purpose, see the following image.
The built-in Local System user account has no password, has a high level of access privileges; it is part of the Administrators group and it presents the computer’s credentials to remote servers.
The built-in Network Service user account has fewer access privileges on the system than the Local System user account; it is part of the Users group but the Network Service user account is still able to interact throughout the network with the credentials of the computer account.
The built-in Local Service user account has fewer access privileges on the local computer; it is part of the Users group and it Use the Local Service user account if the worker process does not require access outside the server on which it is running.
So how can I configure the desired service to use Local System or Network Service accounts?
So how can I grant permission for resources over the network for Network Service or Local System?
So at the end, we have different 3 built-in account 2 of them can access network and they are the same for network resources (Network Service – Local System) and 2 of them can access the local resources with least privileges (Local Service – Network Service), see the following image.