TFS2012 - 复制诊断活动日志时拒绝访问 [英] TFS2012 - Access denied on copying diagnostic activity logs

问题描述

我有一个关于 TFS2012 构建的问题，我似乎无法弄清楚也找不到任何解决方案.

I have a problem with TFS2012 builds which I can't seem to figure out nor find any solution for.

设置:

独立的 SQL 服务器、独立的 TFS 应用程序服务器 (TFSAT01/WinSvr08R2) 和独立的构建机器 (TFSBLD01/Win7x64).

Separate SQL server, separate TFS Application server (TFSAT01 / WinSvr08R2) and separate build machine (TFSBLD01 / Win7x64).

删除在 TFSAT01 上创建的共享 - 授予我们域中两台计算机的 R/W 访问权限:TFSAT01$ 和 TFSBLD01$(根据 #8 http://msdn.microsoft.com/en-us/library/bb778394.aspx)

Drop share created on TFSAT01 - R/W acess granted to the two computers in our domain: TFSAT01$ and TFSBLD01$ (According to #8 http://msdn.microsoft.com/en-us/library/bb778394.aspx)

构建控制器在 TFS 应用程序上配置.服务器TFSAT01.

The build controller is configured on the TFS app. server TFSAT01.

构建代理正在构建机器 TFSBLD01 上运行.

The build agents are running on the build machine TFSBLD01.

问题:

我的 CI 构建完成并将所有二进制文件复制到 drop 共享.

My CI build does complete and does copy all binaries to the drop share.

但是我在构建输出窗口中的其他错误和警告下不断收到一个错误，内容为:将诊断活动日志复制到放置位置时出错.详细信息:拒绝访问路径\TFSAT01\Drops\PRODUCT-CI\PRODUCT-CI_20130211.16\Logs\ActivityLog.xml".".ActivityLog.xml确实写好了，可以访问了

But I keep getting one error under Other Errors and Warnings in the build output window which says: "An error occurred while copying diagnostic activity logs to the drop location. Details: Access to the path '\TFSAT01\Drops\PRODUCT-CI\PRODUCT-CI_20130211.16\Logs\ActivityLog.xml' is denied.". The ActivityLog.xml is indeed written and I can access it.

对于为什么我收到此错误的任何想法，即使共享似乎配置了正确的访问权限?

Any ideas to why I get this error even though it seems that the share is configured with the proper access rights?

注意:我可以通过为构建代理指定一个用户帐户来解决这个错误(也有对 drop 共享的 R/W 访问权限) - 但我宁愿我可以坚持使用构建控制器使用的默认 NetworkService 凭据和代理商.

Note: I can get around this error by specifying a user-account for the build agent to use (also with R/W access rights to the drop share) - but I would rather if I could stick with the default NetworkService credentials used by the build controller and agents.

推荐答案

根据评论中的讨论添加解决方案

Adding in resolution based on discussion in the comments

构建控制器帐户需要对放置位置具有读/写权限.TFSAT01$ 帐户是在此处配置的，而构建控制器配置为网络服务.由于这些不是真正为 NT AUTHORITY\NETWORK SERVICE 提供 R/W 权限的帐户，因此需要修复.

The build controller account needs to have R/W permissions on the drop location. The TFSAT01$ account was provisioned here while the build controller was configured as network service. Since these are not really the same account providing R/W permissions to NT AUTHORITY\NETWORK SERVICE is the required fix.

这篇关于TFS2012 - 复制诊断活动日志时拒绝访问的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！