How do I remove a user from TFS 2018? - security

I have a user that is getting alerts from TFS. When I looked at [Tfs_Configuration].[dbo].[tbl_Identity] I found several people that I have no idea how they got in there.
When I do a backup of the TFS server through the console, they get an email notification.
How do I remove them? I have tried attempting to sync with JobService, rebooted the server, looked in AD at the person, and I've looked in TFS in User Management in the Console. They are not there. I can find them in TFS if I search for a Subscriber on a Project, but nothing in regards to backup or the like or a way to remove them from the entire TFS instance.
I have also looked a the Console and group membership for individual projects. They are not Team Foundation Administrators.

You do not: TFS/VSTS/ADO needs to refer to past users reference in work item, version control and other subsystems.
You can break your database in an unrecoverable way modifying the tbl_Identity table.
The only reasonable thing to do is to remove these users from all TFS (and Active Directory) groups so they only appears in old data. The TFSSecurity utility can help you identify which groups has a specific user.

Related

Azure MS Team integration with Azure DevOps Taskboard only showing Issues, where are my work items?

Azure boards MS Team integration. Only showing Issues or Epics, where are my work items?
I added a tab into a Team channel, and I can see Issues, but there is not option for showing the Work Item field?
On the Azure Boards website I see both fields: Issues and Work items.
Here is no Work Item field
This is the website showing both types at once
As I understand, you are not able to see work item field.
If you need to see work item field,
you need to connect to a project and not just a repository.
From the connect to a Project dialog.
Use CTRL-Shift to select your options and then choose Connect.
The new Work Items experience is available when you connect to a Azure Repos Git repository.
For further reading please follow the document.
You need to set up and manage subscriptions for creating and updating work items. You can create subscriptions to monitor work items at any time using the #azure boards subscriptions command.
Please go through the documentation for more info.
wow I can believe after almost a year nobody replied you. You can set it up in the Organization Settings > Boards > Settings then you can see the process selected. e.g Agile, Basic (what you mentioned) Scrum, etc.
I hope helped someone after this.

How to add user to VSTS Group visualstudio.com

I need to add a colleague to my development environment (specifically VisualStudioOnline - TFS) and the doc I've read about how to do this shows differently than what I see when I try.
I am the only user of Visual Studio 2012 in my small company. I am using Visual Studio Online for Source Control (as I understand it, this exposes Microsoft Visual Studio Team Foundation Service - Version 15.115.26417.0 as a "service" (i.e. this is the cloud...there is no on-premise TFS installed). Currently, I am using a LOCAL workspace (the default) and TFVC (not GIT).
I added my NewUserA to the Administrators group on the dev server. When click menu item Team to Connect to TFS, I am prompted to sign-in with my "Microsoft" account.
However, when I try to add NewUserA to my TFS, the dialog below seems unable to search for the existence of NewUserA:
It seems to want an "identity" of NewUserA (which suggests an email address too) so it sort of makes sense that this prompt does not look for locally added Windows users.
I am quite confused and would appreciate being helped thru this.
If your VSTS account isn't connected to Azure Active Directory and you're not synchronizing your on-premises AD to AAD, then of course it won't be able to find users from your on-prem domain. If that's the case, you can add users by email address and they'll be prompted to sign up for a Microsoft account (if they don't already have one) using that address. This is different than an organizational account, which is what you'd use if you were connected to Azure AD.

TFS 2015 and Sharepoint integration; TF30063 error

Both TFS 2015 and Sharepoint 2013 Foundation are on-premise installations. They are on separate servers. Sharepoint is being configured post TFS installation - although I am not currently updating any existing projects.
Account being used to access the sharepoint site is a full admin on both sharepoint collection as well as TFS too.
TFS Extensions are installed, and configured on the Sharepoint server.
Can successfully create a new TFS 2015 project, and see it create the Sharepoint site - however upon accessing the Sharepoint portal site I see a number of TF30063: You are not authorized to access http://app-p-tfs01:8080/tfs errors.
I note that the collection is not listed on the url; I am looking to use the root web application of the sharepoint site as the root location.
Nothing appearing in Security event logs nor the TFS _oi audit.
Any pointers on where to look next?
The "TF30063" error message indicates that your account doesn't have permission to access TFS. As this blog described, it is caused when some permissions are denied somewhere because deny takes precedence over any other permission.
So, you can run the tfssecurity /imx command to check which group the account belongs to. Then check these group one by one to see the required permissions are not denied.
For the reporting service error, seems that the report doesn't run correctly. Firstly, go to the report server and ensure the data source can be connected successfully.
After discussing this with Microsoft Support today, it transpired the account Sharepoint was running under (which oddly is the same as TFS), did not have the relevant access - even though it WAS listed under the relevant Services group.
This was added to the Administrators group and all was well.
Very strange.

Azure - Access to non-administrator users

We're using Azure to maintain our development and QA servers.
One of the needs we have now, is to provide our QA members access to update web.config file on the server, which can be achieved via Visual Studio Server's Explorer (with the right configuration).
The problem is that you need a user with a subscription as a co-administrator within Azure (at least as far as I managed to understand), but obviously we'd like to allow our QA members only to maintain the files, with limited access via Visual Studio.
Is there any way to do it?
Following Brendan advice, I've granted the QA members FTP access. This should do the job for now, until Microsoft will come up with something better :)
Thanks Brendan!

Sharepoint 2007 deleted documents appear in search results

I'm totally new to sharepoint, My question is simple. I have a document library with some documents in it. When I delete a document from the library, this document still appears in search results. I solved this by running something called full crawl, I honestly don't know what this is. Do I have to do this every time I modify the documents in the library?
Reset your index, good guide here :)
http://sharepointnoob.wordpress.com/2009/05/27/reset-crawled-content-in-moss-2007/
Check the crawl logs for errors during the crawl.
Also try
Go to SharePoint Central Administration > Operations > Services on Server, stop the Windows SharePoint Service Search service
Started the Windows SharePoint Service Search service from SharePoint Central Administration and create a new search database
Re-associated the indexer to the content database from SharePoint 3.0 Central Administration > Application Management > Content Databases
Make sure that your crawl account does not have administrator level privileges to your SharePoint farm. If it does, it can see deleted items and can cause this issue to occur. It should just be a default user account with read permissions.
Yes, I guess you have to do this every single time you do any modification. At least this is how I do it/

Resources