Team Foundation Server user management (in workgroup)

I have been using TFs for a while, and I think TFs user management is quite a bit of a TAO. Below I will record my findings and experiences.

First, TFS does not create the "own" User Function. This seems incredible, but it is true that TFs uses domain users in the domain and TFs uses native users of the TFS application server in the Working Group. This is actually a good idea. TFs is only responsible for the permission management of existing users within the scope of TFS, it is also a simplified approach to secure access control.

When using TFS, you need to set permissions in the following four places:
1. log on to the TFS server from Team explorer.

This is the verification interface first encountered when connecting to TFs. the TFS administrator needs to add users or user groups to the Global Security Attribute page of TFS in advance.

2. Browse the project website.
TFS creates a management website for each project. You can browse documents and view progress reports on the website. This website is controlled by Windows SharePoint Services and its permissions are set in Site Management of SharePoint Services. For example, the project mytestproject management website may be:
Http: // 192.168.0.33/sites/mytestproject/_ layouts/2052/webadmin. aspx

3. view the project progress and report.
It is not enough to have the permission to browse the project website, because some items in project management depend on sqlserver reporting services and must be set in the sqlserver reporting services management interface, in order to view the "Report" node on the project website or team resource manager.
Set sqlserver Reporting Services Access Permissions at http: // 192.168.0.33/reports/pages/folder. aspx, Master folder-properties-security.

4. source code access.
Open vs2005, right-click Project properties-Security in source code management resource manager, and you can set source code and version control related permissions.

Test Environment
Hardware: Lenovo yangtian a8000c, Intel core2 CPU 1.86 GB, 2 GB memory, 250 gb ide hard drive.
OS: winserver2003 + SP1.
TFS: single-server deployment.