All these user accounts...?

Aug 6, 2008 at 12:50 PM
Edited Aug 6, 2008 at 12:52 PM

It might just be that I'm not used to the account policy in the Windows sphere, but I find some of the specifiations for the user accounts confusing.
Above all, I wonder which accounts should have access to which system, and with which authorities.

This I have understood so far:
1. A local administrator account must be used for the installation of the tool.
2. A service account must be used for the actual execution of the tool.
3. A reader account must be used to read the TFS projects on the source TFS instance.
4. A contributor account must be used to write the TFS projects to the target TFS instance.

Now, my questions are :
1. Must the service account, the reader account and the contributor account be one and the same?
1.a) If not, how can I define separate accounts for the two TFS instances?
2. Must the reader and contributor accounts (as mentioned above) both be Service accounts on their respective TFS instance - or on both instances?
3. Must the local service account have access to any of the two TFS instances?

Thanks in advance!
/Johan Strömhielm, Sweden