TFS series-installation and deployment (in progress)

Install TFs Single Server deployment

Install Internet Information Service (IIS) and enable ASP. NET.
-If you select "Internet Information Service (IIS)" and click "details", do not select "frontpage2002 Server Extension ". This server will host Windows SharePoint Services, which is incompatible with FrontPage Server Extensions.

 

Install Microsoft SQL Server 2005 Standard Edition or Enterprise Edition.
-On the "components to be installed" Page, select the following components
• SQL Server database services
• Analysis Services
• Integration Services
• Reporting Services
• Workstation components, books online, and development tools
-On the "Instance name" Page, select "Default instance". If you specify a named instance, the installation of teamfoundation server will fail.

Install Microsoft SQL Server 2005 patchProgram.
-Install SQL Server SP1;
-Alternatively, find the sqlserverkb folder on the team Foundation Server installation media. Find the executable file (.exe.zip corresponding to your operating system and language, for example, as2005-kbnnnnnn-x86-enu.exe, and double-click the file to start installation.

 

User account required for Team Foundation Server Installation

Example Username	Purpose
Tfssetup	• Run the team Foundation server installer. • This account must be an administrator on the team Foundation server computer. • This account and the following two service accounts must be members of the same domain.
Tfsservice	• Used as a team Foundation server Windows Service (CodeCoverage Analysis Service and Tfsschedulerservice) and SharePoint timer Service accounts. • Used as the team Foundation server application pool (vstf apppool) and Windows The application pool ID of the SharePoint Services application pool (tfwss and wss_apppool. • You must have the "local Logon" permission on the team Foundation server computer. • For optimal security, this service account: • It should not be an administrator on the team Foundation server computer. • Select "account sensitive, unable to delegate" for active directory on the domain.
Tfsreports	• Serves as a service account for SQL Server reporting services data sources. • This account should not be an administrator on the team Foundation server computer. • This account must have the "local Logon" permission on the team Foundation server computer.
Tfsproxy	• Use the team Foundation server agent on a computer that is not a member of the same domain as the team Foundation server application layer and data layer components. • This service account must be a member of the "Administrators" group on a remote computer. • This service account must be the "Team Foundation" of the team Foundation server using the proxy Valid users.

 

Required port for Team Foundation Server Installation

SQL Server 2005	TCP port
SQL Server Reporting Service	80
SQL Service	1433
SQL Browser Service	1434
SQL monitoring	1444
SQL Server Analysis Service Redirection Program	2382
SQL Server Analysis Service	2383
Windows SharePoint Services	TCP port
Windows SharePoint Services	80
SharePoint Management Center	17012
Team Foundation Server	TCP port
Team Foundation Server	8080
Team Foundation server proxy	8081
Team Foundation build remoting	9191

 

TFS Security Group
• The Security of the team Foundation server is managed by the Team Foundation server security group, which is different from the Windows domain or local security group.

TFS Security Group	Description
Team Foundation Administrator	• This group contains users who can perform all privileged operations on the server. • By default, the installer will be used to run the installer's account Users (such as domain \ tfssetup) are added to this group.
Service accounts	• This group contains team Foundation Server Service accounts, if used Application pool for Team Foundation Server Web Services ID (for example, domain \ tfsservice ).
Team Foundation valid	Users • This group contains all users and groups that have access permissions to the server.

 

Manage TFs security roles
• when you add a user account to the team Foundation server security role, you must also add the user to the corresponding security roles in window SharePoint Services and SQL serverreporting services.
• to create a team project on the team Foundation server, you must be a member of the "Team Foundation Administrator" group and a member of the "Administrator" Role of Windows Firewall pointservices, it must also be a member of the "content administrator" Role of SQL Server reportingservices.

TFS Security Group	WSS role	SSRs role
[Server] \ team Foundation Administrator	Administrator (top-level site)	Content Manager (system-level role)
[Server] \ team Foundation Valid users	N/	N/
[Server] \ service accounts	N/	N/

• After creating a team project, you can assign different roles to users to manage user permissions based on each project.
• Windows SharePoint services sites do not inherit security settings from top-level sites.
• The item-level security of SQL Server reporting services inherits system-level roles.

TFs security group	WSS role	SSRs role
[projectname] \ Project administrators1	administrator	Content Manager
[projectname] \ contributor1	participants	viewer
[projectname] \ reader1	readers	viewer