Can I change TFS identities “around”

1
votes

We are facing a TFS domain migration. As written in TFS documentation Move user accounts and service accounts the user identities will be moved with the TFSConfig Identities command.

Can I move the identity within the same domain from userA to userB?

And would this happen in a way that there are no references to userA left in TFS database?

Before the migration we will upgrade from TFS 2017.3 to TFS 2018 or Azure Devops Server 2019.

Our general domain migration happend one year ago. The TFS resides in the former domain, say OLDDOMAIN. Every user OLDDOMAIN\initials got a new account as NEWDOMAIN\name.surname.

Unfortunately some users from the new domain where added to the local administrator group of TFS not knowing that TFS will sync them and create TFS identities and without having a clue about the consequences.

The idea is to change those identities from NEWDOMAIN\name.surname to a new user NEWDOMAIN\admin.name.surname OR OLDDOMAIN\initialsAdmin so that OLDDOMAIN\initials can be moved to NEWDOMAIN\user.surname.

1
tfsazure-devops

1 Answers

1
votes

The Identities Command is a powerful tool, but it has certain limitations. To help ensure a successful move, make sure that you understand the following requirements:

  • Once a user account is present in Azure DevOps Server, it cannot be removed or have another account mapped to it. For example, if you are moving DomainA/UserA to DomainB/UserB, the Identities command would only work to migrate the user if DomainB/UserB is not already present in Azure DevOps Server.
  • Because the members of the local Administrators group are automatically added to Azure DevOps Server, make sure to remove any accounts that you want migrated from that group before you change the domain or environment.

As clearly declared in the document you referred, it's not able to map/move idenfity within the same domain from userA to userB.

If you are in this boat then you are hosed already. You may have 2 users as the same people and it will not allow you to change. Sorry for any inconvenience.