Error TF50632 Removing User

Error TF50632 Removing User

• dave45

  We use SID's to identify the users. SID are unique identifiers created by domain controller(AD). In this case due to some problem the SID for that user has become invalid or got changed in AD. Now TFS is not able to identify the user based on the SID.

  If SID is really invalid, next time TFS sync's information with AD we will automatically delete that user.

  Do you still see this user in the system after next round of sync

  
  
  

• DaPosh

  The "Team Foundation Valid Users" group is special - you don't manually add or delete users from it.
  
  If there's a user in that group, it means that they have permissions in some other group inside TFS - if you're trying to remove all their permissions, you'll need to find the other permissions they have assigned and remove them.
  
  
  

• Quirm

  D:\>Tfssecurity /server:http://ettfs1:8080 /im "Lizenzierte Team Foundation-Benu
  tzer"
  TFSSecurity - Team Foundation Server Security Tool
  (C) Copyright 2006 Microsoft Corporation. All rights reserved.

  The target Team Foundation Server is HTTP://ETTFS1:8080.
  Resolving identity "Lizenzierte Team Foundation-Benutzer"...

  SID: S-1-9-1551374245-1204400969-2402986413-2179408616-0-0-0-0-4

  DN:

  Identity type: Team Foundation Server application group
     Group type: LicenseesApplicationGroup
  Project scope: Server scope
   Display name: Lizenzierte Team Foundation-Benutzer
    Description: Benutzer mit einer Lizenz fur die Workgroup Edition von Team Foun
  dation Server

  5 member(s):
    [ U] DMSET01\wucher (Wucher, Volker)
    [ U] DMSET01\g-- (G--, D--)
    [ U] DMSET01\r-- (R--, G--)
    [ U] DMSET01\p-- (P--, T--)
    [ U] DMSET01\f-- (F--, U--)

  Member of 1 group(s):
  e [ A] [SERVER]\Gultige Team Foundation-Benutzer

  Done.

  I removed the other names.

   

  
  

• Robin E Davies

  It's pretty much the same error:

  D:\>Tfssecurity /server:http://ettfs1:8080 /g- "Lizenzierte Team Foundation-Benutzer" dmset01\wucher
  TFSSecurity - Team Foundation Server Security Tool
  (C) Copyright 2006 Microsoft Corporation. All rights reserved.

  The target Team Foundation Server is HTTP://ETTFS1:8080.
  Resolving identity "Lizenzierte Team Foundation-Benutzer"...
  [SERVER]\Lizenzierte Team Foundation-Benutzer
  Resolving identity "dmset01\wucher"...
   [ U] DMSET01\wucher (Wucher, Volker)
  Removing Wucher, Volker from Lizenzierte Team Foundation-Benutzer...

  Error: TF50632: Fehler beim Entfernen des Gruppenmitglieds. Es gibt kein Gruppen
  mitglied mit der Sicherheits-ID (SID) S-1-5-21-1575504413-1545490276-622671684-1034.
  

  
  

• Le Saint

  Are you sure that user is a current member of the group

  What's the output of this command

  Tfssecurity /server:http://ettfs1:8080 /im "Lizenzierte Team Foundation-Benutzer"

  
  
  

• markovuksanovic

  We're out of ideas unfortunately - at this point you'll need to start a support case to have them track down what's going on.

  Sorry.

  
  
  

• re-animated

  Hi,

  Sorry but we moved to the "full" licence version anyway, so we haven't worried about that problem. But it wasn't ever really solved.

  Uli

  
  

• sani007

  I guess so. (When does this sync takes place ) I got the problem now since 3 weeks with some reboots meanwhile. As long as I know there haven't been changes in the AD.

  Uli

  
  

• dotnetangel

  Hi,

  I am having the same problem and wondered if you managed to get it sorted out

  Thanks

  
  

• GSK_phili

  ...Just checked. No, there are no errors in the event log.
  

• ElMagico

  Sync starts every hour. So if the problem was with expired or changed SID it should have been fixed. Let me talk to developers on the team to get more information.

  Can you check you event log and let me know if there are any other errors in event log.

  
  
  

• KentaroM

  Can you try using TfsSecurity.exe (it's in the Tools subdir on the app tier) to do the removal and paste the output/error you get

  It should be something like (assuming you're logged in to the app tier at the time):

  TfsSecurity /server:http://localhost:8080/ /g- "Team Foundation Licensed Users" userto\remove

  http://msdn2.microsoft.com/en-us/library/ms400758(VS.80).aspx

  
  
  

• nidionys

  Thanks for the reply!

  Oops. Sorry. It's not the group of valid users, that I try to remove a user from. It's the group of licensed users. (A little translation mistake. Its a German installation)

  Any suggestions for that problem

  
  
• Error TF50632 Removing User