Submit My Question - Recent Questions - Recent Answer
Msdn Tech >> Visual Studio Team System >> Team Foundation Server - Administration

Team Project Creation Failed

Hi

I have just installed and configured the VSTS foundation Server 180 Day Trial Edition. When I create a new team project with my user credntials (which have been added to the TFS Admin group and SQL Reporting and Sharepoint) I get the error below.

When I create a new team project using the TFSSetup user the project creation is successul, however I am unable to retrieve work items from the Project from Excel or Project. I get the following error "TF80066: You are not authorized to porform this operation. Please contact your Team Foundation administrator."

I am not sure if the problems are related. Any help would be greately appreciated.

Cheers
Jock

Error
TF30004: The New Team Project Wizard encountered an unexpected error while initializing the Microsoft.ProjectCreationWizard.WorkItemTracking plug-in.
Explanation
TF30171: The Microsoft.ProjectCreationWizard.WorkItemTracking plug-in used to create the new team project could not be initialized and returned the following error: TF26204: The account you entered is not recognized. Contact your Team Foundation Server administrator to add your account..
User Action
Contact your Team Foundation Server administrator.

<log file>
2006-06-21 10:56:38Z | Module: Internal | Team Foundation Server proxy retrieved | Completion time: 0.71875 seconds
2006-06-21 10:56:38Z | Module: Wizard | Retrieved IAuthorizationService proxy | Completion time: 0 seconds
2006-06-21 10:56:38Z | Module: Wizard | TF30227: Project creation permissions retrieved | Completion time: 0.078125 seconds
2006-06-21 10:56:38Z | Module: Internal | The template information for Team Foundation Server "vsts.ict.ru.ac.za" was retrieved from the Team Foundation Server. | Completion time: 0.234375 seconds
2006-06-21 10:58:21Z | Module: Engine | Thread: 9 | New project will be created with the "MSF for Agile Software Development - v4.0" methodology
2006-06-21 10:58:21Z | Module: Engine | Retrieved IAuthorizationService proxy | Completion time: 0 seconds
2006-06-21 10:58:21Z | Module: Engine | TF30227: Project creation permissions retrieved | Completion time: 0 seconds
2006-06-21 10:58:22Z | Module: Engine | Wrote compressed process template file | Completion time: 0 seconds
2006-06-21 10:58:32Z | Module: Engine | Extracted process template file | Completion time: 9.953125 seconds
2006-06-21 10:58:32Z | Module: Engine | Thread: 9 | Starting Project Creation for project "Test" in domain "vsts.ict.ru.ac.za"
2006-06-21 10:58:32Z | Module: Engine | The user identity information was retrieved from the Group Security Service | Completion time: 0.015625 seconds
2006-06-21 10:58:32Z | Module: Initializer | Thread: 9 | The New Team Project Wizard is starting to initialize the plug-ins.
2006-06-21 10:58:32Z | Module: CssStructureUploader | Thread: 9 | Entering Initialize in CssStructureUploader
2006-06-21 10:58:32Z | Module: CssStructureUploader | Thread: 9 | Initialize for CssStructureUploader complete
2006-06-21 10:58:32Z | Module: Initializer | Thread: 9 | The New Team Project Wizard successfully Initialized the plug-in Microsoft.ProjectCreationWizard.Classification.
2006-06-21 10:58:32Z | Module: Rosetta | Thread: 9 | Entering Initialize in RosettaReportUploader
2006-06-21 10:58:33Z | Module: Rosetta | Thread: 9 | Exiting Initialize for RosettaReportUploader
2006-06-21 10:58:33Z | Module: Initializer | Thread: 9 | The New Team Project Wizard successfully Initialized the plug-in Microsoft.ProjectCreationWizard.Reporting.
2006-06-21 10:58:33Z | Module: WSS | Thread: 9 | Entering Initialize in WssSiteCreator
2006-06-21 10:58:33Z | Module: WSS | Thread: 9 | Site information: Title = "Test" Description = "This team project was created based on the 'MSF for Agile Software Development - v4.0' process template."
2006-06-21 10:58:33Z | Module: WSS | Thread: 9 | Base site url: http://VSTS/sites
2006-06-21 10:58:33Z | Module: WSS | Thread: 9 | Admin site url: http://VSTS:17012/_vti_adm/admin.asmx
2006-06-21 10:58:33Z | Module: WSS | Thread: 9 | Exiting Initialize for WssSiteCreator
2006-06-21 10:58:33Z | Module: Initializer | Thread: 9 | The New Team Project Wizard successfully Initialized the plug-in Microsoft.ProjectCreationWizard.Portal.
2006-06-21 10:58:33Z | Module: GSSStructureUploader | Thread: 9 | Entering Initialize in GssStructureCreator
2006-06-21 10:58:33Z | Module: GSSStructureUploader | Thread: 9 | Exiting Initialize for GssStructureCreator
2006-06-21 10:58:33Z | Module: Initializer | Thread: 9 | The New Team Project Wizard successfully Initialized the plug-in Microsoft.ProjectCreationWizard.Groups.
begin Exception entry
Time: 2006-06-21 10:58:34Z
Module: Initializer
Event Description: TF30207: Initialization for plugin "Microsoft.ProjectCreationWizard.WorkItemTracking" failed
Exception Type: System.UnauthorizedAccessException
Exception Message: TF26204: The account you entered is not recognized. Contact your Team Foundation Server administrator to add your account.
Stack Trace:
at Microsoft.TeamFoundation.WorkItemTracking.Client.DataStore.HandleComException(Int32 hr)
at Microsoft.TeamFoundation.WorkItemTracking.Client.DataStore.DatastoreClass.ConnectEx(String connectionString, Int32 hCredentials, String defaultCachePath, String instanceId, String userSamName, String userFriendlyName, String userSid)
at Microsoft.TeamFoundation.WorkItemTracking.Client.WorkItemStore.InitializeInternal()
at Microsoft.TeamFoundation.WorkItemTracking.Client.WorkItemStore.Microsoft.TeamFoundation.Client.ITeamFoundationServerObject.Initialize(TeamFoundationServer teamFoundationServer)
at Microsoft.TeamFoundation.WorkItemTracking.Client.WorkItemStore..ctor(TeamFoundationServer teamFoundationServer)
at Microsoft.VisualStudio.TeamFoundation.WorkItemTracking.WitPcwPlugin.PcwPluginComponentCreator.Initialize(ProjectCreationContext ctxt)
at Microsoft.VisualStudio.TeamFoundation.EngineStarter.InitializePlugins(MsfTemplate template, PcwPluginCollection pluginCollection)
-- Inner Exception --
Exception Type: System.Web.Services.Protocols.SoapException
Exception Message: S-1-5-21-2490222962-127708045-2691370565-1256 is not valid user. > S-1-5-21-2490222962-127708045-2691370565-1256 is not valid user. > S-1-5-21-2490222962-127708045-2691370565-1256 is not valid user.
SoapException Details: <detail><details id="600019" xmlns="http://schemas.microsoft.com/TeamFoundation/2005/06/WorkItemTracking/faultdetail/03" /></detail>
Stack Trace:
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at Microsoft.TeamFoundation.WorkItemTracking.Proxy.ClientServiceProxy.GetMetadata(MetadataTableHaveEntry[] metadataHave, String& dbStamp, Boolean useMaster, Int32& locale, Int32& comparisonStyle, String& callerIdentity)
at Microsoft.TeamFoundation.WorkItemTracking.Proxy.ClientService.GetMetadata(String requestId, Boolean useMaster, MetadataTableHaveEntry[] metadataHave, String& dbStamp, IMetadataRowSets& metadata, Int32& locale, Int32& comparisonStyle, String& callerIdentity)
at CProdStudioBackendChannel.GetMetadata(CProdStudioBackendChannel* , tagVARIANT* pvarLocale, tagVARIANT* pvarComparisonStyle, PsUserDisplayModeEnum* pDisplayMode, Boolean* pfUseSIDSecurity, Int32 fNoFire, Int32 fByPassFireOnThis)
-- end Inner Exception --
end Exception entry

2006-06-21 10:58:34Z | Module: Engine | Thread: 9 | Attempting to delete MSF folder "C:\Documents and Settings\J.Forrester\Local Settings\Temp\TPW_tmpD2.tmp"
2006-06-21 10:58:34Z | Module: Engine | Thread: 9 | The temporary folder C:\Documents and Settings\J.Forrester\Local Settings\Temp\TPW_tmpD2.tmp used to store the process template was removed.

</log file>

[8455 byte] By [JockForrester] at [2007-12-21]
«« Analyzing the error messages
»» How to modify & insert into XML without loading the whole file in memory
# 1

When you install TFS you have to specify service accounts for it to run under.

Are you sure that a) the account use used has the proper permissions as defined in the installation guide and b) you typed the password correctly during install?

Hope this helps,

James

Edit: you might also want to make sure that the identity that TFS is running under has the proper credentials in the database, but this is kind of a long shot since as I recall the install pretty much takes care of this for you.

JamesBender at 2007-9-10 > top of Msdn Tech,Visual Studio Team System,Team Foundation Server - Administration...
# 2
Hi

I checked all the permissions and the user accounts and it was all fine. I then decided to reinstall from a two server setup to a single server setup jsut in case I missed something.

I can create a project with no problem from the domain\TFSSetup account which was used to setup up VSTS but when I try and add a work item from my standard user account (Project Lead Permissions) I get "TF26204: The account you entered is not recognized. Contact your Team Foundation Server administrator to add your account."

When I try and create a new Team Project from stad user account, I get the same error in my first post.

Thanks for the ideas James, any more?

Cheers
Jock

JockForrester at 2007-9-10 > top of Msdn Tech,Visual Studio Team System,Team Foundation Server - Administration...
# 3

The first thing to verify is that the users do actually have permission to access TFS. The TfsSecurity utility is located in the Tools directory under the TFS install dir. You can get information on a user with the following command line:

TfsSecurity /server:<server name> /imx <domain\username>

If the user does not exist in the TFS databases, you will get the following output:

D:\>tfssecurity /server:<server name> /imx billg

TFSSecurity - Team Foundation Server Security Tool

(C) Copyright 2006 Microsoft Corporation. All rights reserved.

The target Team Foundation Server is <server name>.

Resolving identity "billg"...

Error: The identity cannot be resolved.

Otherwise, you will get a list of groups that the user belongs to, which will let us figure out if the user should be able to access TFS.

--matt hoover

Software Design Engineer

Visual Studio Team Foundation

MatthewHoover-MSFT at 2007-9-10 > top of Msdn Tech,Visual Studio Team System,Team Foundation Server - Administration...
# 4

Hi Matt

Here is the output of tfssecurity for my user account:

<output>

C:\>TFSSecurity.exe -imx /server:vsts ict\j.forrester
TFSSecurity - Team Foundation Server Security Tool
(C) Copyright 2006 Microsoft Corporation. All rights reserved.

The target Team Foundation Server is VSTS.
Resolving identity "ict\j.forrester"...

SID: valid SID

DN: Valid ou structure

Identity type: Unknown
Logon name: ICT\J.Forrester
Display name: Jock Forrester
Description:

Member of 3 group(s):
a Angel [SERVER]\Team Foundation Administrators
e Angel [SERVER]\Team Foundation Valid Users
a Angel [ICTHelpdesk]\Project Administrators

Done.

</output>

What is the next step?

Thanks for your help

Jock

JockForrester at 2007-9-10 > top of Msdn Tech,Visual Studio Team System,Team Foundation Server - Administration...
# 5

One problem is that the Identity type is Unknown. It should be Windows user.

Is there anything special about this user? Are the user having problems AD users, or are they local users on the app tier? If AD is involved, are there more than one forest, and are there trust relationships between all of the domains?

--Matt Hoover
Software Design Engineer
Microsoft Team Foundation Server

MatthewHoover-MSFT at 2007-9-10 > top of Msdn Tech,Visual Studio Team System,Team Foundation Server - Administration...
# 6

Hi

Sorry for the long delay in replying, I have been away at two conferences recently. I don;t think that I had the user as a local user of the app tier. I have just reinstalled the box again (have finally received the full version - was using the trial version). I will set it up the same as before and test it and then add the user to the local users group.

I'll let you know how it works out.

Again, thanks for you time Matt.

Cheers

Jock

JockForrester at 2007-9-10 > top of Msdn Tech,Visual Studio Team System,Team Foundation Server - Administration...
# 7

Hi Matt

I reinstalled the box, added the user to the local users group on the app tier and I still got the same error. Running the tfssecurity app the user was still of an unknown type.

I then added a few other users in the Domain as Project Admins and some of them came back as a Windows user in the tfssecurity app. The only difference between the users the I added is that my account type is InetorgPerson and the other is a User type.

I am going to redo my user as a "User" and see how that works out. I will post back later today.

Cheers
Jock

JockForrester at 2007-9-10 > top of Msdn Tech,Visual Studio Team System,Team Foundation Server - Administration...
# 8

Hi

Changing my AD user type to User from InetOrgPerson has done the trick.

Thanks for your help.

Cheers
Jock

JockForrester at 2007-9-10 > top of Msdn Tech,Visual Studio Team System,Team Foundation Server - Administration...
Visual Studio Team System
Team Foundation Server - Administration

Visual Studio Team System Hot Topic

Visual Studio Team System New Topic

Visual Studio Team System

Java / MSDN / Linux Tech / PHP Tech / MSDN DotNet / MSDN TECH / Health Library / Programmers Tech / visual basic Tech / Developer Tech / Ipod faqs / Msdn China Tech

Site Classified