Microsoft, please help me diagnose TFS Administration permission issues!

TL;DR

Troubleshooting TFS 2010 admin permission errors caused by not running TfsConfig as administrator, despite correct group memberships and server permissions.

4 March 2010
Written by Martin Hinshelwood
2 minute read
Comments
Subscribe

I recently had a fun time trying to debug a permission issue I ran into using TFS 2010’s TfsConfig.

Update 5th March 2010 – In its style of true excellence my company has added rant to its “Suggestions for Better TFS ”.


I was trying to run the TfsConfig tool and I kept getting the message:

“TF55038: You don’t have sufficient privileges to run this tool. Contact your Team Foundation system administrator."

This message made me think that it was something to do with the Install permissions as it is always recommended to use a single account to do every install of TFS. I did not install the original TFS on our network and my account was not used to do the TFS2010 install. But I did do the upgrade from 2010 beta 2 to 2010 RC with my current account.

So I proceeded to do some checking:

  • Am I in the administrators group on the server?
    image

    **Figure: Yes, I am in the administrators group on the server
    **

  • Am I in the Administration Console users list?
    image

    Figure: Yes, I am in the Administration Console users list

  • Have I reapplied the permissions in the Administration Console users list ticking all the options?
    image

    **Figure: Make sure you check all of the boxed if you want to have all the admin options
    **
    **image

    Figure: Yes, I have made sure that all my options are correct.**

  • Am I in the Team Foundation administrators group?
    image

    **Figure: Yes, I am in the Team Foundation Administrators group
    **

  • Is my account explicitly SysAdmin on the Database server?
    image

    Figure: Yes, I do have explicit SysAdmin on the database

Can you guess what the problem was?

The command line window was not running as the administrator!

As with most other applications there should be an explicit error message that states:

“You are not currently running in administrator mode; please restart the command line with elevated privileges!”

This would have saved me 30 minutes, although I agree that I should change my name to Muppet and just be done with it.

Technorati Tags: ALM  TFS Admin  SSW  TFS 2010

Smart Classifications

Each classification [Concepts, Categories, & Tags] was assigned using AI-powered semantic analysis and scored across relevance, depth, and alignment. Final decisions? Still human. Always traceable. Hover to see how it applies.

Comments
Subscribe

What to read next

Article

TFS 2012 - Issue: Manage Group Membership missing from admin after TFS 2008 to TFS 2012 Upgrade

Explains how to restore missing group membership management in TFS 2012 after upgrading from TFS 2008 by manually adding permissions using …

Read article
Article Engineering Excellence

Access denied for orchestration plan on Build

Explains how to resolve TFS build errors caused by missing write permissions for the Project Collection Build Service on orchestration …

Read article