Quantcast
Channel: Team Foundation Server - General forum
Viewing all articles
Browse latest Browse all 6687

Redundant AD User Accounts in the TFS 2012 'Assigned To' List

$
0
0

The 'Assigned To' list in TFS 2012 still includes a number of user accounts for users that have left the company and I'd like to understand why. The redundant user accounts still exist in Active Directory but they've been  stripped of all their group memberships. This should be sufficient for them to be automatically removed from TFS.

I've checked my hourly automated 'Active Directory' sync within event viewer and it appears to work as there are no errors - see below.

#######################################################################

TF200030: Team Foundation Server completed group synchronization for the following group: Sync Tree.

Incremental sync (current cycle start time (UTC) 22/01/2014 16:00:14, cycle duration 1.00:00:00, number of syncs per cycle 24).

Application Domain: TfsJobAgent.exe

Service Host:      59f068ba-2c74-4171-8814-6aa27b8c8bb6 (TEAM FOUNDATION)

#######################################################################

I've executed the TFSSecurity utility and the user account appears to still reside in two groups:

#######################################################################

TFSSecurity /imx n:"sssssssss\wwwwwww.yyyyyy" /server:http://xxxxxxx01:8080/tfs

Microsoft (R) TFSSecurity - Team Foundation Server Security Tool

Copyright (c) Microsoft Corporation. All rights reserved.

The target Team Foundation Server is http:// xxxxxxx01:8080/tfs.

Resolving identity "n:xxxxxl\yyyyy"...

SID: S-1-5-21-

DN: CN= xxxxx \, xxxxx,OU=Users,OU=xxxx,OU=xxxx,DC=xxxxx,DC=xxx,DC=corp

Identity type: Windows user

Logon name: xxxxx \ xxxxx. xxxxx

Mail address: xxxxx@xxxx.com

Display name: xxxx, xxxxx

Description: 10/22/2012 12:00:00 AM

Member of 2 group(s):

e [A] []\Project Collection Valid Users

e [A] [TEAM FOUNDATION]\Team Foundation Valid Users

#######################################################################

I have also executed the ‘TFSSyncIdentities.exe /server:http://xxxxxxxxx:8080/tfs /status’ utility to force a sync and this appeared to work too.

Does anyone have any further ideas?

Thank Cossy

 

 


Cossy



Viewing all articles
Browse latest Browse all 6687

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>