Domain trust issues for deploying TFS - Lab env - Clients in different domains

Question

Hi

I posted this question in MTM+Lab forums but I'll ask here also for help

We are about to deploy TFS in a multi domain environment, where TFS appl & data tier machines & build servers are located in domain A, lab environment VM based located in Domain B and clients are located in Domain C

1. We'll set trust between TFS domain to the to others domain, but do we need a trust between clients domain to lab domain for users that use MTM to connect the virtual machines?

2. one way trust or two way trust between TFS domain vs other domains?

3. are there any performance issues caused by working with multiple domains?

Thanks

Dan

Answer 1

Hi

We are about to deploy TFS in a multi domain environment, where TFS appl & data tier machines & build servers are located in domain A, lab environment VM based located in Domain B and clients are located in Domain C

1. We'll set trust between TFS domain to the to others domain, but do we need a trust between clients domain to lab domain for users that use MTM to connect the virtual machines?

2. one way trust or two way trust between TFS domain vs other domains?

3. are there any performance issues caused by working with multiple domains?

Thanks

Dan

Answer 2

Hi Dan,
 
Thank you for your post.

Based on this case is as same as this one, I merge them together, it will be very beneficial for other community members having the similar questions.

Thank you for your understanding and support.

Best Regards,

---

Lily Wu [MSFT]
MSDN Community Support | Feedback to us

Answer 3

Hi Dan,

Lab environment VM should be two way trust with other two domains, check this blog:  http://blogs.msdn.com/b/lab_management/archive/2010/03/29/setting-up-various-topologies-to-test-with-visual-studio-team-lab.aspx

Client side domain could be one-way trust to domain A(App tier, DB tier and Build server), but it’s suggested setup two way trust between all domains here. 
Trusts and Forests Considerations for Team Foundation Server http://msdn.microsoft.com/en-us/library/ms253081.aspx
Configuring Lab Management for the First Time http://msdn.microsoft.com/en-us/library/dd380687.aspx

Yes, multiple domain will results in performance decreasing, every connection to another domain will need query domain controller(DNS).  Network situation will affect the connection here.

Best regards,

---

Lily Wu [MSFT]
MSDN Community Support | Feedback to us

Answer 4

Thanks.

Dan