Do not ask why. The fact is that I accidentally deleted my account (the only licensed user) from the Server Licensed Users group.

I am not able to connect to TFS now. I am planning to reinstall, but that takes much time.

I tried to found a Server side admin tool, but it seems there is no such tool.

Is it possible to add users to the licensed group using a command line tool?

Thanks.

If you run repair/reinstall for Team Foundation Server on the Application Tier from the "Add/Remove Programs" control panel, it should fix that for you.

Best of luck-

Cheers,
Adam

If you're logged in to the App Tier as a member of the Administrators group, you should be able to add users via the TfsSecurity.exe tool.

• http://msdn2.microsoft.com/en-us/library/ms252504.aspx
• http://www.codeproject.com/dotnet/tfssecuritytools.asp

It should be something like this:

tfssecurity /server:http://jmanning-test:8080 /g+ "Team Foundation Licensed Users" domain\user

Thanks for the information. I tried to use the tool, but failed. I have a single-server deployment so that means the App Tier is also on the same machine as the database tier.

I logged into this machine using a local Administrator account 'test' and carried out the following command:

C:\Program Files\Microsoft Visual Studio 2005 Team Foundation Server\Tools>TFSSecurity /server:http://experiment:8080 /g+ "Team Foundation Licensed Users" "domain\myuser"

The output is:

TFSSecurity - Team Foundation Server Security Tool
(C) Copyright 2006 Microsoft Corporation. All rights reserved.

The target Team Foundation Server is HTTP://EXPERIMENT:8080.
The request failed with HTTP status 403: TF53011: EXPERIMENT\test is not a licen
sed user..

What else do I need to do to get the user added?

Thanks.

I've since learned that:

• This bug is fixed for the next release (can't remove the last member of licensed users) but not for our upcoming Service Pack 1
• For V1, it needs to be a member of the "Service Accounts" group

So, try the TfsSecurity.exe line again logged in as (or runas'ing as) one of your service accounts (for example, Domain\TfsService)