Team Foundation At the company I work for, I am the primary TFS administrator. Overall, I think TFS is a fantastic system. Updates come out quarterly, and are – in general – painless to install.
Update 4 went in easily on our test TFS server, and no issues were discovered. We went ahead and pushed the update to our production server. Everything went fine (though the install seems to always take longer, even though our databases are pretty small). I was in the process of upgrading the build machines when I noticed that the build services had upgraded fine, but none of the services had started.
I spent several hours trying everything I could think of to get the services to start, but they wouldn’t work. I tried reboots, unregistering the services and reading them, using different service accounts, and adding the account to every TFS and Built-In group I could find. I finally narrowed it down to the build service account, my account ran the build services fine. That’s when I started looking closely at the permissions given to the account. Everything listed as Inherited Deny.
There were no groups that had Deny privileges, so I was at a loss. Finally, I came across a forum post on the Microsoft support site that explained the issue. in update 4, the licenses were changed, and the stakeholder license was added. Apparently if this is the default license for users, then the service accounts are pushed into this access level, which disables functions they need in order to do their jobs.
Once I added the build account as a Basic License, everything began running correctly again.