System info

If you want to create easier to remember names for your VMs you could create some CNAMEs in your DNS so you can have a name like iis-01.dev.lab.tfs.domain.local instead of VSLM-58-62ff5f0e-3584-4fed-b726-5741bb62e659.domain.local of course this is quite a bit of effort if you have many environments and machines or recreate your environment.

Lab Center Environment

In my DNS Manager I have created a few subdomains as containers for virtual machine friendly names in Lab Management Environments.

DNS Manager | Subdomains

Now that I have those subdomains I just need a really easy method to create CNAMEs based on the computers in my environments so I can get entries like these created for me.

Alias (CNAME)

I created a Powershell Script to iterate through a Lab Environment for a Team Project. In Lab Center I have enabled the display of the ID column for the Environments which I will use later in the Lab URI.

Environments with ID

Here is a sample command-line:

.\CreateCnamesForLabEnvironment.ps1 -dnsServer ws08srv -flzone “domain.local” -aSuffix “lab.tfs.domain.local” -labUri “vstfs:///LabManagement/LabEnvironment/56″ -tpcUrl “http://localhost/tfs/DefaultCollection”

Here is the Powershell script, use at your own risk.  Let me know if you find it useful. 
The script ignores the machine configured as the Domain Controller in the environment as it has no external adapter defined. The script gets the internal computer name to use as the friendly name.


# CreateCnamesForLabEnvironment.ps1
# helper function
function isNullOrEmpty {
param (
[string] $str
)
if ([system.string]::IsNullOrEmpty($str))
{
return $true
}
else
{
return $false
}
}
# http://blogs.technet.com/b/heyscriptingguy/archive/2010/09/13/manage-dns-in-a-windows-environment-by-using-powershell.aspx
function newcname {
param(
[string]$dnsServer,
[string]$flzone,
[string]$labComputer,
[string]$alias
)
## split the hostname from the FQDN
$server = $dnsServer -split "\."
$rr = [WmiClass]"\\$($server[0])\root\MicrosoftDNS:MicrosoftDNS_ResourceRecord"
##
## create CNAME
$text = "$alias IN CNAME $labComputer"
$rr.CreateInstanceFromTextRepresentation($dnsServer, $flzone, $text)
}

if (-not(isNullOrEmpty($computerName)))
{
if (-not(isNullOrEmpty($internalComputerName)))
{
Write-Host "Creating a CNAME for "$computerName
Write-Host "Alias (CNAME):"$alias
newcname $dnsServer $flzone $computerName $alias
}
}
}
}
else {
Write-Host "The Lab Environment specified is not running!"
Write-Host "Lab URI: "$labUri
Write-Host "Environment Name: "$labEnv.Name
Write-Host "Environment State: "$labEnv.StatusInfo.State
}


I’ll continue to step through enabling Kerberos Authentication for the following services:

• TFS 2010 Application Tier which consists of both the Web Services and Team Web Access

To find out the Service Account that is relevant to this exercise in your environment, logon (or RDP) to your TFS 2010 Application Tier and launch the Team Foundation Server Administration Console

Application Tier Summary

There are five entries here which are relevant and they are:

• Service Account
• Authentication
• Notification URL
• Server URL
• Web Access URL

The URLs using your friendly name should only be display in Notification URL and Web Access URL, the Server URL should be set to localhost unless you have specific reason.

In my example I am using a domain account named DOMAIN\tfsService and a friendly DNS Name of tfs.domain.local with that information I can create the SPN (Service Principal Name) by executing the following command:

• Setspn -S http/tfs.domain.local domain\tfsService

With that step completed I need to return to the Team Foundation Server Administration Console and modify the Application Tier Authentication Settings and change it from NTLM to Negotiate (Kerberos).  I do this in the Administration Console by selecting the Authemtication Settings Hyperlink on the far right side of the console.

After that is complete Launch Internet Information Services (IIS) Manager and select the Site which hosts your Team Foundation Server Website and under Management select Configuration Editor.  If you are running IIS 7.0 (Windows Server 2008) this management feature may not be installed, if that is the case you can get the feature as part of the Administration Pack 1.0 for IIS 7.0.

IIS Configuration Editor

Double click on the Configuration Editor and navigate to the following Section:

system.webServer/security/authentication/windowsAuthentication

You must set the following attributes to True:

• useAppPoolCredentials
• useKernelMode

Then under Actions on the far right select Apply.  Now from a remote machine use a web browser (IE, Firefox requires some manual configuration) to access the Team Web Access site at http://tfs.domain.local/tfs/web/.

Firefox

If Kerberos authentication is working correctly you will see Logon events in the security event logs on the TFS Application Tier with Event ID 4624. In the general tab for these events you should see the Security ID being logged onto the computer and the Logon Process used, which should display as Kerberos.

Event ID 4624 Logon Process: Kerberos

Successfully authenticated to Visual Studio 2010 Team Web Access using IE 9.x and FireFox 13.x.

Team Web Access (IE 9.x)

Team Web Access (Firefox 13.x)

You’re probably here because you’ve read this excellent post by Ed Blankenship.  If you also want to enable Kerberos Authentication support to this configuration there are a few more steps involved.  This post will only deal with configuring the Kerberos Authentication as it relates to SQL Server, I will cover the TFS and SharePoint configuration in another post.

IMPORTANT

If you are accessing the friendly names on the same computer they refer to you may receive the following error: HTTP Error 401. The requested resources requires user authentication.

An example of this is where I am on the TFS Application Tier and Launch IE and attempt to browse the SQL Server Reporting Services website which is hosted on the local machine.

If this occurs then you probably have not disabled the Loopback Check for this friendly name, please refer to this KB 896861 on the methods to resolve this.

LET’S GET STARTED

To continue I will assume you have friendly names configured for all of your various servers and/or applications.

I’ll step through enabling Kerberos Authentication for the following services in a typical TFS 2010 Enterprise configuration:

• TFS 2010 Application Tier
• SQL Server 2008+
• SharePoint Server 2007/2010 Web Site
• SQL Server 2008+ Reporting Services

SQL Server 2008 and SQL Server 2008 Reporting Services

Here are the service accounts that I will be referring to:

• DOMAIN\_sq8_sqldbserver – this account is used to run the SQL Server Database Engine Service
• DOMAIN\_as8_sqldbserver – this account is used to run the SQL Server Analysis Services Service
• DOMAIN\_rs8_sqlrsserver – this account is used to run the SQL Server Reporting Services Service
• DOMAIN\_ag8_sqldbserver – this account is used to run the SQL Server Agent Service

SPNs (Service Principal Names)

If you want to verify the accounts being used to run your SQL Server Services simply Launch the SQL Server Configuration Manager on the appropriate servers.  It should look something like this screenshot:

We must create the SPNs for the various SQL Server Services service accounts:

• setspn -S MSSQLSvc/sqldbserver:1433 domain\_sq8_sqldbserver
• setspn -S MSSQLSvc/sqldbserver.domain.local:1433 domain\_sq8_sqldbserver
• setspn -S MSOLAPSvc.3/sqldbserver domain\_as8_sqldbserver
• setspn -S MSOLAPSvc.3/sqldbserver.domain.local domain\_as8_sqldbserver
• setspn -S MSOLAPDisco.3/sqldbserver serverHostname
• setspn -S MSOLAPDisco.3/sqldbserver.domain.local serverHostname
• setspn -S http/reports.tfs.domain.local domain\_rs8_sqlrsserver

The first two SPNs above are for the SQL Server Database Engine, the next two SPNs are for SQL Server Analysis Services, the next two are for the SQL Server Browser Service and the last SPN is for the HTTP endpoint for SQL Server Reporting Services.

NOTE: SPN formats have changed starting with SQL Server 2008.  If you are running SQL Server on a different port or using a named instance please reference the link and format your SPN accordingly.  If you are running Analysis Services as a named instance you must also format your SPN to include that information, please refer to the following KB 917409.  If you are using a named instance for Analysis Services or of SQL Server you must also have an SPN for the SQL Server Browser Service, please refer to the following KB 950599.

Configure Active Directory settings

Make sure that all the following conditions are true for the Active Directory directory service settings, you can find the configuration for these settings by launching Active Directory Users and Computers and Right Clicking on the Object (Domain Account or Computer Account) you wish to configure select Properties and then click the tab titled Delegation :

• The Account is sensitive and cannot be delegated setting is not enabled for user accounts that will be delegated.
• The Trust this user for delegation setting is enabled for the domain account of the middle tier that is connecting to SQL Server (Database Service or Analysis Service). For example, if IIS is the middle tier and a domain account is used for the application pool, that application pool domain account must have the Trust this user for delegation setting enabled.
• The Trust this user for delegation setting is enabled for the accounts of all services and COM+ components that are involved in the process.
• The Trust this computer for delegation setting is enabled for all the computers that are involved in the process.

The Active Directory settings I need to configure in this case are as follows:

Launch Active Directory Users and Computers

Find the server that is hosting your TFS Application Tier/Reporting Services and Right Click, select Properties, select the Delegation tab and select the “Trust this computer for delegation to any service (Kerberos only)” radio button and click Apply.

Find the domain account that is running the SQL Server Reporting Services Service and Right Click, select Properties, select the Delegation tab and select the “Trust this user for delegation to any service (Kerberos only)” radio button and click Apply.

WANT A GUI

If you don’t want to use the command-line (setspn command) to create your SPNs you can use ADSI Edit to update the servicePrincipalName Attribute of the various domain accounts referenced above.

SQL Server Reporting Services Configuration

There is some additional configuration for SQL Server Reporting Services that you must perform by editing the following file:

rsreportserver.config

It is located in the folder where you installed SQL Server Reporting Services which in my case is:

C:\Program Files\Microsoft SQL Server\MSRS10_50.MSSQLSERVER\Reporting Services\ReportServer

You must ensure the bolded element exists in the following section:

<Authentication>
<AuthenticationTypes>
<RSWindowsNegotiate/>
<RSWindowsNTLM/>
</AuthenticationTypes>

If a domain account is configured for the Reporting Services service account and an SPN is not configured this configuration might prevent users from accessing the service.

The SQL Server services should all be restarted to take advantage of the SPN configurations we did above, these services are as follows:

• SQL Server Database Engine
• SQL Server Analysis Services
• SQL Server Reporting Services

The first two should be located on the database server and the last one should be located on the TFS Application Tier.

On the TFS Application Tier you must create a SQL Alias, to do this I recommend you execute SQL Server Configuration Manager to configure your Alias.

This step is required so that when a SQL connection is made to your friendly name Kerberos Authentication will be used.

Verify Kerberos is being used by SQL

You can test whether you have everything configured correctly at this point by launching SQL Server Management Studio on the Application Tier and connecting to the database server and executing the following query.  The steps are as follows:

1. Launch SSMS and Connect to your database server using the ALIAS
2. Execute the following Query

select auth_scheme from sys.dm_exec_connections where session_id=@@spid

This will show you the authentication scheme being used on the current connection (your SSMS connection), this will verify your Alias is configured correctly.

If you want to see the authentication scheme used by all the connections just edit the query slightly removing the where clause and including the client address:

select auth_scheme, client_net_address from sys.dm_exec_connections

Verify Kerberos is being used by SSRS website

From a client computer (not directly on the TFS Application Tier) navigate to the SSRS friendly URL you have configured.  Note you may have add the URL to the “Local intranet” zone.

Now connect to the server hosting the SQL Server Reporting Services website and take a look at the Event Viewer specifically looking at the Security Logs for Event ID 4624 it should look something like this and you will see Kerberos was used:

Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          5/9/2012 10:32:05 AM
Event ID:      4624
Task Category: Logon
Level:         Information
Keywords:      Audit Success
User:          N/A
Computer:      TFS.domain.local
Description:
An account was successfully logged on.

Subject:
Security ID:        NULL SID
Account Name:        -
Account Domain:        -
Logon ID:        0×0

Logon Type:            3

New Logon:
Security ID:        domain\user
Account Name:        user
Account Domain:        DOMAIN
Logon ID:        0x587dbeb
Logon GUID:        {47214756-1eed-ac0c-0bb8-4dc8eca9c6de}

Process Information:
Process ID:        0×0
Process Name:        -

Network Information:
Workstation Name:
Source Network Address:    -
Source Port:        -

Detailed Authentication Information:
Logon Process:        Kerberos
Authentication Package:    Kerberos
Transited Services:    -
Package Name (NTLM only):    -
Key Length:        0

This event is generated when a logon session is created. It is generated on the computer that was accessed.

If you have any questions on the post please feel free to leave a comment.

Managed Service Accounts

A Managed Service Account (MSA) is a domain account  created and managed by the Domain Controller.  An MSA has the rights to register an SPN (Service Principal Name) with Active Directory and you are not required to manage the password either!

Requirements

• Requires Active Directory
• Extend Active Directory Schema to Windows Server 2008 R2
• The HOST using the MSA must be running Windows Server 2008 R2
• PowerShell, AD PowerShell (part of RSAT) and .NET 3.5

Steps (on DC)

• Open Powershell Command Prompt (as Administrator)
• import-module activedirectory
• New-ADServiceAccount -name MSAname -Enabled $true
• Add-ADComputerServiceAccount -Identity ServerName -serviceaccount MSAname

NOTE: Make sure you keep it under 15 characters or you will have issues on the HOST trying to install it, specifically: Install-ADServiceAccount : Cannot install service account. Error Message: ‘Unknown error (0xc0000017)’.

Steps (on HOST) using the MSA

• Add Feature “Active Directory module for Windows PowerShell”
• Install-ADServiceAccount -Identity MSAname
• Now you can use the MSA using this notation: domain\MSAname$ (leave the password fields blank)

NOTE:  The account installing the MSA needs to be a local administrator and permissions to modify the MSA in Active Directory.  If the installer account is a member of Domain Administrators it will work, if not you will need to delegate modify permissions to the service account’s AD object.

This virtual machine demonstrates the integration of Team Foundation Sever 2010 with Project Server 2010. Four (4) walkthroughs are also included that demonstrate using enterprise project plans in Project Server associated with team projects in Team Foundation Server.

1. Top-Down Planning of Business Requirements with Project Server and Team Foundation Server
2. Managing Project Details in an Enterprise Project Plan Mapped to a Team Project
3. Making Agile Team Progress Visible to the Project Management Office
4. Managing Field Mappings for Integration of Team Foundation Server and Project Server

**UPDATE 05/15/2012: These labs are also available as a 4 part video series

http://channel9.msdn.com/Blogs/briankel/Top-Down-Planning-of-Business-Requirements-within-an-Enterprise-Project-using-Team-Foundation-Server/player?w=512&h=288

You can download the files for this on the Microsoft Download Center, or using these instructions borrowed from Brian Keller for Free Download Manager:

1. Download and install Free Download Manager. This utility provides:
   • Auto-resume support for interrupted downloads.
   • Multiple simultaneous download streams for (usually) a much faster download experience.
   • As the name implies, it’s completely free.
2. Select the following list of URL’s and copy (CTRL+C) them to your clipboard. You can select all the URLs at the same time. 
   http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/1%20-%20Top-Down%20Planning%20of%20Business%20Requirements%20with%20Project%20Server%20and%20Team%20Foundation%20Server.docx http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/2%20-%20Managing%20Project%20Details%20in%20an%20Enterprise%20Project%20Plan%20Mapped%20to%20a%20Team%20Project.docx http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/3%20-%20Making%20Agile%20Team%20Progress%20Visible%20to%20the%20Project%20Management%20Office.docx http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/4%20-%20Managing%20Field%20Mappings%20for%20Integration%20of%20Team%20Foundation%20Server%20and%20Project%20Server.docx http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/Working%20with%20the%20Project%20Server%202010%20and%20Team%20Foundation%20Server%202010%20Integration%20Virtual%20Machine.docx http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/WS2008R2x64Ent_TFS2010_PS2010.part01.exe http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/WS2008R2x64Ent_TFS2010_PS2010.part02.rar http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/WS2008R2x64Ent_TFS2010_PS2010.part03.rar http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/WS2008R2x64Ent_TFS2010_PS2010.part04.rar http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/WS2008R2x64Ent_TFS2010_PS2010.part05.rar http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/WS2008R2x64Ent_TFS2010_PS2010.part06.rar http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/WS2008R2x64Ent_TFS2010_PS2010.part07.rar http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/WS2008R2x64Ent_TFS2010_PS2010.part08.rar http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/WS2008R2x64Ent_TFS2010_PS2010.part09.rar http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/WS2008R2x64Ent_TFS2010_PS2010.part10.rar http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/WS2008R2x64Ent_TFS2010_PS2010.part11.rar http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/WS2008R2x64Ent_TFS2010_PS2010.part12.rar http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/WS2008R2x64Ent_TFS2010_PS2010.part13.rar http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/WS2008R2x64Ent_TFS2010_PS2010.part14.rar http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/WS2008R2x64Ent_TFS2010_PS2010.part15.rar http://download.microsoft.com/download/6/4/0/640BAA77-929F-42C4-91C6-1E0597B2EEAD/WS2008R2x64Ent_TFS2010_PS2010.part16.rar
3. Launch the user interface for Free Download Manager (either from the Start Menu or via the system tray icon if FDM is already running).
4. Click File -> Import -> Import List of URLs from Clipboard.
5. When prompted for a download group, accept the default ("Other") and click OK.
6. You are now free to minimize Free Download Manager while the files download. By default, they will be saved to c:\downloads.

You can use Microsoft’s MSDN Forum to provide feedback or request assistance: http://social.msdn.microsoft.com/Forums/en-US/tfsprojectsrvint

A discussion recently arose over how to patch TFS 2010 Test Controllers and TFS 2010 Test Agents.

TFS 2010 SP1 will not patch the Test Controller or Test Agent products.  In this example I have a virtual machine in my LAB which has both of the lab agents (workflow and testing) installed and configured.

This virtual machine in my Lab was prepared using the VM Prep Tool to install and configure the agents.

In order to properly patch this configuration you must install VS 2010 SP1 in addition to TFS 2010 SP1, at this point you can go ahead and install TFS 2010 SP1 CU2 which will patch both the client and server SKUs installed.

To recap you must install the following updates and in the correct order:

• TFS 2010 SP1
• VS 2010 SP1
• TFS 2010 SP1 CU2 (KB 2643415 – Important: you need to apply this update on all the TFS servers and on all TFS clients)

The following steps are applicable if the following is true:

• New install of TFS 2010
• SQL Server 2008 R2 configured to use individual domain accounts to run the services

After this particular install I noticed that in the Application Event Log I was getting the following error message every two (2) hours:

Detailed Message: TF221122: An error occurred running job Incremental Analysis Database Sync for team project collection or Team Foundation server TEAM FOUNDATION.

Verify the Reporting Configuration using the Team Foundation Server Administration Console.

Check the state of the warehouse using Grant Holliday’s Administrative Report Pack for Team Foundation Server 2010.  This will allow you to easily monitor the status of the cube.  In this particular case it was failing processing both the Full and Incremental jobs (ignore the 2 successful runs at the end for now).

A little bit more information could be seen in the Inner Exception Details:

Exception Message: Internal error: The operation terminated unsuccessfully.
Server: The operation has been cancelled.
OLE DB error: OLE DB or ODBC error: Login failed. The login is from an untrusted domain and cannot be used with Windows authentication.; 28000.
Errors in the high-level relational engine. A connection could not be made to the data source with the DataSourceID of ‘Tfs_AnalysisDataSource’, Name of ‘Tfs_AnalysisDataSource’.

The issue here is that the account running the SQL Server Database Engine did not have permissions to connect and process the cube.  This is easy to fix by connecting to Analysis Services and adding the domain account that runs the database engine to the TfsWarehouseAdministrator Role in the Tfs_Analysis database.

Once you have granted those permissions you can manually process the data warehouse and cube for Team Foundation Server by connecting to the web services on the application tier.  Note: Do not manually process cube using SQL Server Management Studio that method is not supported.

I manually processed the Analysis Services Cube first by running a Full, then followed by an Incremental using the web services

Verified the status of both runs by checking the Cube Status Report.

You can see the Full (12:16) and Incremental (12:58) jobs were processed successfully.

A few tips to get you started:

Community TFS Build Extensions can be download here from CodePlex.  This is a collection of activities you can integrate into your process template.

I used this blog posting from Ewald Hofman to configure my Visual Studio 2010 environment to edit the process template. I add the process template as “link” to the template project so it remains in the appropriate folder.

I do that so I don’t have the dreaded “one or more children have validation errors or warnings” on every activity in the process template.

Here is the walkthrough that is posted on MSDN to accomplish the task, and here are the issues I have with that particular walkthrough:

• Hardcoded name of a deploymanifest for the database project you wish to deploy
• Only supports a single database project
• Process is executed on the Controller and not the Agent 

I made the following changes to the build process which better suited my requirements:

• Scan the BinariesDirectory for all .deploymanifest files
• Execute VSDBCMD for each .deploymanifest in the BinariesDirectory
• Execute the VSDBCMD process on the Agent not the Controller

Here is how my the Deploy Database Projects looks in the designer in Visual Studio 2010

If the build runs successfully you should get something similar to the following output written to the Log of your build.

A few things to note:

Make sure the account configured to run the Agent has the appropriate permissions in SQL Server or you may get errors similar to the following:

.Net SqlClient Data Provider: Msg 262, Level 14, State 1, Line 1 CREATE DATABASE permission denied in database ‘master’.

If you are unsure as to where the database project is deploying just have a look at the deploymanifest and check the contents of TargetConnectionString.

You can easily verify the account that is running the Team Build Service (Agent) by launching the Team Foundation Server Administration Console and click Build Configuration the account running the service is displayed to the right.

You can download the Process Template I used for this blog post here.  If you have any questions feel free to post a comment.

The VMPrep Tool for Visual Studio Lab Management 2010 is located on the MSDN Archive.

Assuming your file-share is \\LabMgr, your layout should be as below

• \\LabMgr\AgentInstaller\
• \\LabMgr\TFSInstaller\
• \\LabMgr\PatchInstaller\
• \\LabMgr\VMPrepTool\

All patches which need to be applied should be present in a folder. This folder should be indicated in the Applications.xml file (found inside VMPrepToolLibrary), in the following parameter: <Application name ="PatchesPath" path ="" />. The VMPrep Tool will pick up any executables that are found in this folder (it does not search under sub-folders) and install them.

If you are running the tool in Self Service Command-line mode you can specify the UNC paths as follows:

VMPrepTool.exe SelfService  /AgentInstaller:\\LabMgr\AgentInstaller  /TFSInstaller:\\LabMgr\TfsInstaller /PatchInstaller:\\LabMgr\PatchInstaller

The VMPrep Tool looks for KBxxxxxxx in the file name, and then orders the execution of these in the order of the KB numbers.  The easiest way would be to rename the files as follows:

• TFS2010SP1.exe to KB2182621.exe
• VS2010SP1.exe to KB2983509.exe
• TFS2010SP1CU1.exe to KB2983510.exe

And then these files will be installed in the correct order as part of VMPrep Tool process.

Credit and Thanks to the Microsoft Product Group for explaining the behaviour and Ed Blankenship for asking the question.

Yesterday afternoon I did a session on Visual Studio 2010 Lab Management (targeted at the ITPro).  If you are looking for the links that were on the resources slide from the PowerPoint deck.  I will post them here (plus a few more).  Visual Studio ALM MVP Etienne Tremblay from Montreal also sat in on my session and participated in the conversation, he is delivering a session on Testing with Visual Studio 2010 and Lab Management at DevTeach today.  Adam Gallant of Microsoft Canada is giving a session on Debugging with Visual Studio 2010 Ultimate using IntelliTrace.

• VHD Test Drive – Visual Studio Lab Management
• Lab Management (pre-release) 2010 Walkthrough
• Microsoft Visual Studio 2010 Service Pack 1
• Microsoft Visual Studio Team Foundation Server 2010 Service Pack 1
• Windows 7 and Windows Server 2008 R2 Service Pack 1 (KB976932)
• Visual Studio 2010 and MSDN Licensing White Paper
• Visual Studio 2010 Feature Packs (MSDN Subscribers Only)
• Deployment Planning Services benefit (Software Assurance)
• Rangers Lab Management Guide
• Build-Deploy-Test workflow on physical environments
• August ‘11 TFS Power Tools
• Preventing Build Hangs and File Locking on Build Servers When Running Unit Tests
• Source Server and Symbol Server Support in TFS 2010
• Disabling the Visual Studio Source Server Security Warning Dialog
• Using Friendly DNS Names in Your TFS Environment
• Enabling a Host based connection for virtual environments
• How to run the same test in different Lab Environments

Microsoft Canada Contact Information

Adam Gallant
National Technology Specialist, Developer Tools and ALM
adamga@microsoft.com

Marco Di Virgilio
Developer Solutions Specialist
madivi@microsoft.com

Cumulative Updates

• Visual Studio 2010 SP1 TFS Compatibility GDR
• QFE for Visual Studio 2010 Testing Tools
• TFS 2010 SP1 Cumulative Update 1 (KB2580221)
• Update for VS 2010 SP1 Report Viewer (KB2549864)
• Update for VS 2010 SP1 (KB2529927)
• Update for VS 2010 SP1 Web Platform Tools
• Update for VS 2010 SP1 TFS Build Explorer (KB2522890)

Language Packs

• Visual Studio 2010 SP1 Language Packs

Here is a list of some of the fixes and improvements:

• Adds support to the TE 2010 client to allow it to work with a TFS 11 server and the Team Foundation Service Preview.
• Support for multi-line test steps in Microsoft Test Manager
• KB2522890 – Team Explorer Crashes when opening build from TFS 2008
• KB2552300 – Gated Check-ins fail with the “Preserve local Changes” option
• KB2561827 – Microsoft Diff and Merge closes with unhandled exception when comparing two files.

The knowledge base article has not yet been published on the Microsoft Support site.  You can download the update here.