How to: Configure Cache Security for Team Foundation Server Proxy

As an administrator for Team Foundation Server, you must add a service account for Team Foundation Server Proxy and specify a password to maintain security for the proxy.

If you must change this service account or password, you can use Internet Information Services (IIS) Manager or the installation wizard for Team Foundation Server Proxy to make the changes.

Required Permissions

To perform this procedure, you must be a member of the Administrators security group on the computer that is running Team Foundation Server Proxy.

To add a service account for Team Foundation Server Proxy by using IIS Manager

1. Make sure that the service account is a member of the Team Foundation Valid Users group.

   For more information, see Team Foundation Server Permissions.

2. On the server that is running Team Foundation Server, click Start, point to Administrative Tools, and then click Computer Management.

3. In the tree pane, expand Computer Management (Local), expand System Tools, expand Local Users and Groups, and then click Groups.

4. In the results pane, double-click IIS_WPG or IIS_IUSRS.

5. On the General tab, click Add.

6. In the Enter the object names to select box, type the name of the service account for Team Foundation Server Proxy (for example, Domain\TFSSERVICE), and click OK twice.

7. To assign the service account to the application pool, perform the following steps:

   For Windows Server 2003:

   1. In the tree pane, expand the Services and Applications node.

   2. Click Internet Information Services, and then expand the <ServerName> (local computer) node.

   3. Double-click Application Pools, right-click Microsoft Team Foundation Server Proxy Application Pool, and then click Properties.

   4. Click the Identity tab.

   5. Update the User name and Password boxes with the name and password for the service account, and then click OK.

   For Windows Server 2008:

   1. In the tree pane, expand the Internet Information Services node, and then expand the <ServerName> (local computer) node.

   2. Double-click Application Pools, right-click Microsoft Team Foundation Server Proxy Application Pool, and then click Set Application Pool Defaults.

   3. Click the Identity property, and then click the properties button (…).

      The Application Pool Identity dialog box opens.

   4. Click Custom account, and then click Set.

      The Set Credentials dialog box opens.

   5. Update the User name and Password boxes with the name and password for the service account, and then click OK twice.

8. Stop and restart the Microsoft Team Foundation Server Proxy Application Pool.

   For more information, see How to: Stop and Start Services, Application Pools, and Web Sites.

9. Close Computer Manager.

10. Locate the cache root folder, and verify that only the service account for Team Foundation Server Proxy has Read and Write permissions.

11. Locate the %WINDIR%\Temp folder, and verify that the service account has Read & Execute, List Folder Contents, and Read permissions.

    For more information about the root cache folder, see How to: Change Cache Settings for Team Foundation Server Proxy.

To add a service account by using the installation wizard for Team Foundation Server Proxy

1. On the server that is running Team Foundation Server Proxy, open Windows Explorer, and locate the installation directory for Team Foundation Server Proxy.

   Note

   By default, this directory is …\Program Files\Microsoft Visual Studio 2008 Team Foundation Server\Web Services\VersionControlProxy.

2. Back up the Proxy.config file.

   For example, you can copy the file to a temporary folder and rename the file Proxy.config.backup.

3. Click Start, point to Control Panel, and then click Add or Remove Programs.

4. In the Add or Remove Programs dialog box, click Microsoft Visual Studio 2008 Team Foundation Server (proxy) - ENU.

5. Uninstall Team Foundation Server Proxy by clicking Change/Remove, clicking Uninstall, and then clicking Next.

6. In the confirmation dialog box, click OK.

7. Reinstall Team Foundation Server Proxy, and specify the new service account for it.

8. Restore the Proxy.config file to the installation directory for Team Foundation Server Proxy.

Change the Password for the Service Account

If you already have a service account for Team Foundation Server Proxy, you can change its password by using its installation wizard or by using IIS Manager. To change the password by using IIS Manager, perform steps 7 and 8 of the first procedure in this topic.

To change the password by using the installation wizard for Team Foundation Server Proxy

1. On the server that is running Team Foundation Server Proxy, click Start, point to Control Panel, and then click Add or Remove Programs.

2. In the Add or Remove Programs dialog box, click Microsoft Visual Studio 2008 Team Foundation Server (proxy) - ENU.

3. Click Change/Remove, click Repair/Reinstall, and then click Next.

4. Set the password, and complete the installation.

See Also

Tasks

How to: Stop and Start Services, Application Pools, and Web Sites

How to: Verify or Correct the IIS Configuration for an Application Pool

How to: Enable Version Control Caching for Team Foundation Server Proxy

How to: Examine Cache Performance By Using Performance Monitor

Concepts

Managing Remote Connections to Team Foundation Server Proxy