0

I have migrated TFS 2013 to TFS 2015 update 3, and also from DOMAIN (Domain1--> Domain2). After that some legacy users from Domain1 appeared in the new TFS 2015.

I can go to TFS Administrator Console, and try to remove them, but is not working. It says, Malformed Artifact URI....

Any workaround available ?

enter image description here

nerlijma
  • 935
  • 1
  • 9
  • 24

2 Answers2

0

Docs say doing a move plus moving domains is unsupported https://msdn.microsoft.com/en-us/library/ms404883(v=vs.120).aspx

nschonni
  • 4,069
  • 1
  • 28
  • 37
  • This is 2013, I have moved to TFS 2015. – nerlijma Jul 22 '16 at 16:05
  • If you go to the latest docs pages https://www.visualstudio.com/docs/setup-admin/get-started it still points to that page. They don't support upgrading both of those things at the same time. I think you need to do the domain move first or the upgrade first, then the domain move. If you search around SO you'll see that TFS and orphan users are a general problem during upgrades no matter what – nschonni Jul 22 '16 at 19:04
  • Ok, now is done, any workarround available? Deleting them from the database? – nerlijma Jul 27 '16 at 12:12
  • I'd suggest trying to use TFSSecurity.exe as @Cece - MSFT mentioned in the other answer to see if you can remove them from there. The DB method mentioned in http://stackoverflow.com/questions/6042666/remove-orphan-identities-in-tfs-2010 will invalidate your support from MS – nschonni Jul 27 '16 at 15:05
0

You can try to use TFSConfig Identities command to change the security identifier (SID) of users:

TFSConfig Identities [/change /fromdomain:DomainName1 /todomain:DomainName2 [/account:AccountName]
Cece Dong - MSFT
  • 29,631
  • 1
  • 24
  • 39
  • domain1, is a workgroup (local server users) and domain 2 is a domain controller. Old TFS is not powered anymore. What this domain move does exactly? – nerlijma Jul 22 '16 at 16:06
  • 1
    You don't need these accounts any more? You should have removed them before changing the environment. You may check tfssecurity /g- command to see whether it can remove these accounts: https://www.visualstudio.com/en-us/docs/setup-admin/command-line/tfssecurity-cmd#g-remove-a-user-or-group – Cece Dong - MSFT Jul 25 '16 at 10:21