Team Development with Visual Studio Team Foundation Server

Administration
• How to secure your build server
• How to delete a build
• How to delete a build type
• How to associate a work item with a build
How to Secure Your Build Server
To secure your build server
1. Deploy build services on a separate server, rather than sharing a server with the
Microsoft Visual Studio® 2005 Team Foundation Server (TFS) application-tier or
data-tier.
2. Grant the build process read/write access to the builds directory. Ensure that the
account running the build is able to access this directory.
3. Grant the build process read/write access to the build drop network share. Ensure that
the account running the build is able to access this share.
4. Ensure that the account used to run the team build is a member of the Team Project’s
Build Services group.
To improve Team Foundation Server security, you should install the build server on its
own computer rather than on the application tier or data tier. Certain deployment or build
steps may require elevated privileges; for example, creating a virtual directory to deploy a
Web application requires administrative rights on the build server. This means that the
Microsoft Windows® account running the build requires these rights. If the build
computer is on the application tier, then this could present a security risk. Similarly, if the
build computer is on the data tier, the build account could access and change the
databases on that tier.
Note: For security reasons, do not add the account running the team build to the
SERVER\ Service Accounts group. Members of this group have full administration rights
in TFS.
Additional Resources
• For more information about TFS groups and permissions, see “Team Foundation
Server Default Groups, Permissions, and Roles” at http://msdn2.microsoft.com/enus/library/ms253077(VS.80).aspx
How to Delete a Build
To delete a build, you use the TFSBuild command-line tool. Specify the address of the
TFS server, the name of the team project, and the build name; for example:
TfsBuild delete http://mytfsserver:8080 myproject build20070606.4
Additional Resources
• For more information about deleting a completed build, see “How to: Delete a
Completed Build” at http://msdn2.microsoft.com/en-us/library/aa337656(VS.80).aspx