Hello!

We are about to install TFS RTM version. The install guide suggests 4 different domain accounts before we start installation. But, per company policies, the system admins are trying to avoid the number of production service accounts created due to some policies.

Is it a good idea to create one service account (prodtfsservice) that has all the admin rights (like tfssetup qaccount mentioned in the install guide) and use it across for setup, service and reports purpose?

What risks do we potentially run into if we do this?

Thanks!

Setup will require you to have at least 2 separate accounts. I believe it checks that the service account is different from the reporting account. I cannot remember if it also checks that the service account is different from the setup account. So the first part will be that you won't be able to get past setup without separate accounts.

Second, it would not be wise to have an admin account at your service/reporting account. While we try to mitigate all security risks, running processes under admin that are then published to the web (even if it is internal) isn't a recommended idea.