While setting up a TFS Backup Plan (part of the TFS 2010 Power Tools) on a new Team Foundation Server, I ran into a security issue.
[ Grant Backup Plan Permissions ] Account tfssetup failed to create backups using path TfsBackups.
I didn’t get rid of this error after making sure that the tfssetup account had the appropriate rights on the shared network folder where the backups will be dropped.
Giving Everyone modifications rights resolved the issue immediately, but of course that’s not the solution I was looking for.
So, ProcessMonitor from SysInternals came once again to the rescue. There I found out that SQL Server (sqlsrvr.exe) was trying to access the shared network folder.
Solution: also grant modifications rights on the shared network folder to the SQLService account that’s running SQL Server.
You are right, But for creating a TFS backup plan we need to give write permissions for both TFS backup task scheduler account and sql server running account.
Also for the task scheduler account we need to give full security permissions.
1. Required Permissions for Service Account running the TFS power tool (Tfsservice@domain.com)
a)Local administrator of the TFS server
b)Full Share permission and Security permission to the Share folder
c)Member of Sysadmin server roles in SQL server
2. Required Permissions for Service Account running the MSSQL Account (sql@domain.com)
a)Full Share permission and Security permission to the Share folder
>Solution: also grant modifications rights on the shared network
>folder to the SQLService account that’s running SQL Server.
G-r-e-a-t ! you saved my day-ass-composure.
>Solution: also grant modifications rights on the shared network
>folder to the SQLService account that’s running SQL Server.
G-r-e-a-t ! you save my day-ass-composure.