Grant Holliday

If you are working with a Team Foundation Server and your workstation isn’t joined to the domain, adding users to will be problematic through the UI.

This is because your local machine does not have access to the domain that the server is running in and you can’t list the available users.

Don’t worry, you can achieve this via the command line without joining the domain.

You will need your server administrators to give you a copy of TFSSecurity.exe which is installed on the TFS Application Tier.

Then you can run the following commands:

Add domain user to TFS group

tfssecurity.exe /server:servername /g+ “[TeamProject]\Group” n:”DOMAIN\user”

List the TFS groups that a domain user is a member of

tfssecurity.exe /server:servername /im n:”DOMAIN\user”

For the complete list of commands, read the MSDN page on TFSSecurity Command-Line Utlility Commands.