Always prompted for credentials in TFS 2010?

Topic(s)
Audience

Everyone

VisualStudioALMLogo

Sometimes when you setup TFS you find that your users, or just some of them, are being prompted for credentials. While manageable this is annoying and is not really related to TFS. This is an Active Directory thing and yes, there is a workaround…

 

 


The best way to fix this is to have your Active Directory administrator add your OWN domain to the list detected as internal and thus intranet. By default using just the server NETBIOS name will work anyway, but in this world of domain names http://tfs.company.com looks a lot better and is easier to remember than http://tfs. Its a brain thing… and it is a Kerberos thing, but don’t worry about that.

So, first, why is this happening?

SNAGHTML154bd5c
Figure: User Authentication on the Internet / Intranet

Its the default and it should be this way!

If you accidentally change this to allow authentication in all zones you may be exposing your username and password beyond the bounds of your internal network. This is not good.

So, if you want to fix this send this email to your Active Directory administrator or support desk:

Dear Admin,

Can you please make it so that all things that I access thorough the network as “*.mydomain.com” are classed as “intranet” so that I can authenticate correctly without having to enter my username and password every time. Can you also make sure that everyone i work with has the same setting applied automatically.

image
o_Error-iconFigure: Bad example, I should not have to do this locally

Hint: you can do this by adding “*.mydomain.com” to the list of websites that are automatically in Internet Explorers “Intranet” list

image
o_Tick-iconFigure: Good example, now i can authenticate

  • Please can you change the domain policy to add this automatically to Internet Explorer

Thanks,

Frustrated local user

But, sometimes you get a less than prompt response. How can I solve this in the mean time, knowing that my Support team is working hard of fixing it permanently?

[screencast url=”http://www.screencast.com/t/PAx7VWfa3jn” width=”640″ height=”360″]
Screencast: Administering TFS 2010 – Always prompted for credentials?

But I just want the simple steps!

  1. Open IE
  2. Click “Tools | Internet Option…image
    Figure: Internet Options is well hidden
  3. Go to “Security” tab.image
    Figure: These settings apply to all internet access, not just IE
  4. Select “Local Intranet | Sites | Advancedimage
    Figure: All useful options are hidden away
  5. Confirm that “*.mydomain.com” is in the list and add it if it is not.
  6. Close all instances of Internet Explorer

Now when you open IE and go to any address that contains your company domain it will automatically pass through your Active Directory identity.

Create a conversation around this article

Share on Facebook
Share on Twitter
Share on Linkdin

Read more

Martin Hinshelwood
For a long time now I have been searching for that perfect domain that epitomised the vision, the why, of what I am trying to achieve with my customers and the industry at large. Now I have found it in http://nkdagility.com
Martin Hinshelwood
At the MVP Summit I was appalled by the number of people who asked questions about new features for supporting hierarchical tasks! I shared a disgusted look with Peter Provost and we had a quick (and I mean really quick) conversation that resulted in this post. it really comes down …
Martin Hinshelwood
In my journey of delivering an immersive Product Development Mentor Program over the last eight weeks, a compelling narrative unfolded that beautifully illustrates the essence and true strength of Scrum. This story, rooted in the practical application of Scrum through Minecraft, unveils the depth of adaptability and resilience that Scrum …
Martin Hinshelwood
The Boards in Azure DevOps are a powerful tool that your teams can leverage to enable transparent visualization of the current state of value delivery.  However, the inclusion of Blocked columns can stealthily erode the very foundations of efficiency these boards are meant to uphold. By obfuscating the state of …