How to: Configure Cache Security for Team Foundation Server Proxy

  • Article

As a Team Foundation Server administrator, you must add a Team Foundation Server Proxy service account and specify a password to maintain security for the Team Foundation Server Proxy.

Note

By default, you created this account and password when you installed Team Foundation Server Proxy. For more information about how to install Team Foundation Server Proxy and user accounts required for Team Foundation Server setup, see the Team Foundation Installation Guide. For more information, visit the Team System Documentation Directory (https://go.microsoft.com/fwlink/?LinkId=62213).

If you must change the proxy service account or password, you can use IIS Manager or the proxy installation wizard to make the changes.

Required Permissions

To perform this procedure, you must be a member of the Administrators security group on the Team Foundation Server Proxy computer.

To add a Team Foundation Server Proxy service account using IIS Manager

  1. Make sure that the new proxy service account is a member of the Team Foundation Valid Users group.

    For more information, see Team Foundation Server Permissions.

  2. On the Team Foundation Server Proxy server, on the Start menu, point to Administrative Tools, and then click Computer Management.

  3. In the left pane, expand Computer Management (Local), System Tools, Local Users and Groups, and then click Groups.

  4. In the right pane, double-click IIS_WPG.

  5. On the General tab, click Add.

  6. In the Enter the object names to select box, type the proxy service account name, for example, Domain\TFSSERVICE.

  7. Click Start, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.

  8. In the left pane, expand the Internet Information Services node and the <server name> (local computer) node.

  9. Under Application Pools, right-click TFS Proxy AppPool, and then click Properties.

  10. Click the Identity tab.

  11. Update the User name and Password boxes with the proxy service account name and password.

  12. Close IIS Manager.

  13. Locate the cache root folder and verify that only the proxy service account has Read and Write permissions.

  14. Locate the %WINDIR%\Temp folder and verify that the service account has Read & Execute, List Folder Contents, and Read permissions.

For more information about the root cache folder, see How to: Change Cache Settings for Team Foundation Server Proxy.

To add a service account by using the Team Foundation Server Proxy installation wizard

  1. On the Team Foundation Server Proxy server, open Windows Explorer and locate the proxy installation directory.

    Note

    The default proxy installation directory is …\Program Files\Microsoft Visual Studio 2005 Team Foundation Server\Web Services\VersionControlProxy.

  2. Make a backup of the Proxy.config file.

    For example, you can copy the file to a temporary folder and rename the file Proxy.config.backup.

  3. Click Start, point to Control Panel, and then click Add or Remove Programs.

  4. In the Add or Remove Programs dialog box, click Microsoft Visual Studio 2005 Team Foundation Server (proxy) - ENU.

  5. Uninstall Team Foundation Server proxy by clicking Change/Remove, Uninstall and then click Next.

  6. In the confirmation dialog box, click OK.

  7. Reinstall Team Foundation Server proxy and specify the new proxy service account.

  8. Restore the Proxy.config file to the proxy installation directory.

Change the Password for the Service Account

If you already have a Team Foundation Server Proxy service account, and you want to change the password, you can change it by using IIS Manager or by using the Team Foundation Server Proxy installation wizard.

To change the password using IIS Manager

  1. On the Team Foundation Server Proxy server, open IIS Manager.

  2. In the left pane, expand the Internet Information Services node and the <proxy server name> (local computer) node.

  3. Under Application Pools, right-click TFS Proxy AppPool, and then click Properties.

  4. Click the Identity tab, change the password in the Password box, and then click OK.

  5. Close IIS Manager.

To change the password using the Team Foundation Server Proxy installation wizard

  1. On the Team Foundation Server Proxy server, on the Start menu, point to Control Panel, and then click Add or Remove Programs.

  2. In the Add or Remove Programs dialog box, click Microsoft Visual Studio 2005 Team Foundation Server (proxy) - ENU.

  3. Click Change/Remove, Repair/Reinstall and then click Next.

  4. Set the service account password and complete the installation.

See Also

Tasks

How to: Enable Source Control Caching for Team Foundation Server Proxy
How to: Examine Cache Performance for Team Foundation Server Proxy

Concepts

Managing Remote Connections to Team Foundation Server Proxy