security - How to add Windows group as “Readers” to all projects in TFS 2010 collection?

Question

I asked this question originally on ServerFault.com, but there seems to me more activity regarding TFS 2010 on StackOverflow.com, so I decided to re post it here...

---

It is my understanding that "Project Collection Valid Users" TFS group can no longer be modified directly.

However, I would like to grant all of my domain users (Windows group called "DOMAINDomain Users") a "reader" level access to TFS project Collection...

I know I can go to each Project and add "DOMAINDomain Users" to [Project]Readers group but I am wondering if this is possible to achieve in "one shot" so that future projects are already accessible when set up.

Answer 1

To have this AD group added to a TFS group for your upcoming projects you have to modify your project template. There you can preconfigure your projects, exspecially set permissions to groups and users.

For the existing projects you have to do it by hand. I don't know any other way than that.