TFS 2008 beta 2: How to add a Network Service account to the Build Services group

We changed the build agent setup such that the default presented in the setup GUI is to use Network Service as the build service account.  One big advantage of doing this is that the Network Service account doesn't have a password that expires, removing one annoying administrative issue.

Once you install the build agent, you need to add the service account to the Build Services security group for the team project where the build definition resides.  That's all explained in the installation guide and other documentation.

In beta 2, however, the Network Service account for a computer cannot be added to the Build Services group using the Visual Studio 2008 GUI (normally, you would right-click on the team project, choose Security, then Group Membership, and add your account to the group).

We have fixed this issue for the final release of TFS 2008.  You can find the workaround of running tfssecurity.exe in section 2.7.4 of the TFS 2008 Readme.

Jim pointed out to me this morning that the readme link on the installation media for beta 2 takes you to a page that does not have this workaround listed (that'll be investigated, too).

Comments (4)

  1. The MSDN Ireland Blog on Team Edition for Database Professionals Walkthrough. Brian Harry on VSTS Web…

  2. So I use VPCs quite a lot and today I decided that I would test drive the upgrade experience from TFS

  3. John Sewell says:

    But there IS no section 2.7.4 in the "TFS 2008 Readme" document to which you linked ( Nor is there mention of "tfssecurity.exe" in the document.

    MS alias: a-johnse

  4. buckh says:

    John, this post is nearly 18 months old and doesn’t apply to RTM.  You no longer need the workaround.  You can make the change using the GUI.


Skip to main content