If a user is part of two TFS security groups, why do they (appear to) receive the lesser security of the two?

Posted by Jedidja on Server Fault See other posts from Server Fault or by Jedidja
Published on 2012-04-04T15:29:20Z Indexed on 2012/04/04 17:32 UTC
Read the original article Hit count: 197

Filed under:

team-foundation-server

|

tfs2010

Given two TFS security groups

Admins: Contains a set of Windows users
Friends: Contains a Windows Security Group (which is also used as a mailing list)

However, the people listed as admins are also part of the security group. It appears that when I lock down the Friends group to certain directories in TFS, the people in Admin also lose their privileges.

Is there any way for users to receive the maximum security allowed between multiple groups they are included in? Or have I perhaps setup my TFS security groups incorrectly?

© Server Fault or respective owner

Related posts about team-foundation-server

Mercurial Conversion from Team Foundation Server

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
I’m using Twitter. Follow me @matthawley One of my many (almost) daily tasks when working on the CodePlex platform since releasing Mercurial as a supported version control system, is converting projects from Team Foundation Server (TFS) to Mercurial. I'm happy to say that of all the conversions… >>> More
Generate automated builds for source code from multiple branches using Team Foundation Server and Te

as seen on Code Project - Search for 'Code Project'
Generate automated builds for source code from multiple branches using Team Foundation Server and Team Builds >>> More
Visual Studio 2013 Static Code Analysis in depth: What? When and How?

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
In this post I'll illustrate in details the following points What is static code analysis? When to use? Supported platforms Supported Visual Studio versions How to use Run Code Analysis Manually Run Code Analysis Automatically Run Code Analysis while check-in source… >>> More
[Visual Studio Extension Of The Day] Test Scribe for Visual Studio Ultimate 2010 and Test Professional 2010

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
Test Scribe is a documentation power tool designed to construct documents directly from the TFS for test plan and test run artifacts for the purpose of discussion, reporting etc... . Known Issues/Limitations Customizing the generated report by changing the template, adding comments,… >>> More
Overwriting TFS Web Services

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
In this blog I will share a technique I used to intercept TFS Web Services calls. This technique is a very invasive one and requires you to overwrite default TFS Web Services behavior. I only recommend taking such an approach when other means of TFS extensibility fail to provide the same functionality… >>> More

Related posts about tfs2010

Help/Questions About New Team Foundation Server 2010 Installation

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello. Before starting down the TFS2010 installation process, I have a few questions I'm hoping the community can help me with. We're planning on a single-server installation of TFS2010. Initially, we want version/source control and build services, but not reporting or SharePoint. We may add reporting… >>> More
Cannot Create New Team Project TFS2010 TF249063 TF218017

as seen on Stack Overflow - Search for 'Stack Overflow'
Server: Windows 2008 R2 Standard Team Foundation Server 2010 WSS 3.0 TFS Configuration: Single Server instalation (including SharePoint) The following error occurs when trying to create a new team project from my local machine. The ://sourcecontrol site and ://sourcecontrol/sites/DefaultCollection/… >>> More
Roll up project-level tasks to the project collection portal in TFS2010

as seen on Stack Overflow - Search for 'Stack Overflow'
I have a Project Collection setup in my TFS2010RC deployment. I have two Projects setup under this collection with their own task lists, which are populated with data. I fully expected the tasks from these individual projects to "roll up" and appear in the task list at the Project Collection level… >>> More
How should I proceed to upgrade from TFS2008 to TFS2010

as seen on Server Fault - Search for 'Server Fault'
Hi, We have a TFS2008 server with multiple team projects (about 20) What is the best way to migrate to TFS2010 without loosing the history. I believe there are 2 ways, correct me if I'm wrong: installing a fresh tfs2010 and importing the DB from TFS 2008 or in-place upgrade. What is your recommendation… >>> More
Can't Access TFS 2010 Beta 2 from Visual Studio 2010 Beta 2 when domain joined

as seen on Server Fault - Search for 'Server Fault'
I'm experimenting with an installation of TFS 2010 Beta 2 on a virtual machine under VirtualBox running Windows Server 2008. When I've got the server in a workgroup, I can connect to it from Visual Studio just fine, as long as I provide credentials for a local user on the server machine when prompted… >>> More