{"id":2123,"date":"2013-12-12T00:21:28","date_gmt":"2013-12-12T00:21:28","guid":{"rendered":"https:\/\/blogs.msdn.microsoft.com\/visualstudioalm\/2013\/12\/12\/configuring-release-management-to-work-across-untrusted-domains\/"},"modified":"2022-07-18T06:25:54","modified_gmt":"2022-07-18T14:25:54","slug":"configuring-release-management-to-work-across-untrusted-domains","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/devops\/configuring-release-management-to-work-across-untrusted-domains\/","title":{"rendered":"Configuring Release Management to work across untrusted domains"},"content":{"rendered":"

\n <\/font>There are times when you will want Release Management (RM) to interact with machines that are not part of the same domain. This post details the steps required to configure RM to work across untrusted domains.<\/font><\/span>\u00a0<\/font><\/span>\n<\/p>\n

\n <\/font>
Configuring the Microsoft Deployment Agent<\/font><\/span><\/b><\/font>\u00a0<\/font><\/span>\n<\/p>\n

\n <\/font>
<\/font>Follow these steps to configure the Release Management Server and the Deployment Agent on machines that run in different domains that do not have a two-way trust relationship.<\/font><\/span>\u00a0<\/font><\/span>\n<\/p>\n

\n 1.<\/font><\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/font><\/span>On each computer where you will install the RM Server or Deployment Agent, create a local user account that is a member of the Administrators<\/b> group. Use the same account and password on each machine (i.e. Shadow Account). <\/font><\/span><\/span><\/font>\n<\/p>\n

\n 2.<\/font><\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/font><\/span>Add the RM Server\u2019s Shadow Account to RM and grant both \u201cService User\u201d and \u201cRelease Manager\u201d permissions. <\/font><\/span><\/span><\/font>\n<\/p>\n

\n 3.<\/font><\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/font><\/span>Add the Deployment Agent\u2019s Shadow Account to RM and grant \u201cService User\u201d permission. <\/font><\/span><\/span><\/font>\n<\/p>\n

\n 4.<\/font><\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/font><\/span>Use the Shadow Account as the service account when you install and configure the Deployment Agent. <\/font><\/span><\/span><\/font>\n<\/p>\n

\n \u00a0<\/font><\/span>\n<\/p>\n

\n Note:<\/font><\/span><\/b> <\/font><\/span><\/b>When you add the local accounts to Release Management, include the name of the local machine where the account resides. <\/font><\/span><\/font>\n<\/p>\n

\n<\/blockquote>\n

\n> For example, add the user account as or <\/font><\/span>\u00a0<\/font><\/span><\/span>\n> <\/p>\n

**<\/font><\/p>\n

Configuring the Release Management Client for Visual Studio 2013\n<\/p>\n

<\/font><\/span><\/p>\n

<\/font>\u00a0<\/font><\/span>**<\/p>\n

\n <\/font>In the case where it is your Release Management Client application is running in a different domain than where the Release Management Server is installed, configuring a Windows Credential in the Credential Manager of the client machine will enable the authentication to happen successfully.<\/font><\/span><\/font>\u00a0 <\/p>\n

<\/font><\/span>\n<\/p>\n

\n <\/font>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/font><\/span><\/span><\/span><\/span><\/a>\"clip_image001[6]\"<\/a> <\/p>\n

<\/span>\n<\/p>\n

\n 1.<\/font><\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/font><\/span>Open the Credential Manager on a client machine. <\/font><\/span><\/span><\/font>\n<\/p>\n

\n 2.<\/font><\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/font><\/span>Click on Add a Windows credential. <\/font><\/span><\/span><\/font>\n<\/p>\n

\n 3.<\/font><\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/font><\/span><\/font><\/font>Enter the necessary information.<\/font> <\/span><\/span>\n<\/p>\n

\n <\/font>\u00a0\u00a0\u00a0\u00a0 <\/font><\/span><\/span><\/span><\/span><\/a>\"clip_image002[10]\"<\/a> <\/p>\n

<\/span>\n<\/p>\n

\n <\/font>\u00a0<\/font><\/span>\n<\/p>\n

\n 5.<\/font><\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/font><\/span>Open the Release Management Client and it will now open correctly. <\/font><\/span><\/span><\/font>\n<\/p>\n

\n 6.<\/font><\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/font><\/span><\/font><\/font>These steps will need to be repeated for each client machine that needs access to Release Management.<\/font> <\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

There are times when you will want Release Management (RM) to interact with machines that are not part of the same domain. This post details the steps required to configure RM to work across untrusted domains.\u00a0 Configuring the Microsoft Deployment Agent\u00a0 Follow these steps to configure the Release Management Server and the Deployment Agent on […]<\/p>\n","protected":false},"author":62,"featured_media":45953,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[226,1],"tags":[],"class_list":["post-2123","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ci","category-devops"],"acf":[],"blog_post_summary":"

There are times when you will want Release Management (RM) to interact with machines that are not part of the same domain. This post details the steps required to configure RM to work across untrusted domains.\u00a0 Configuring the Microsoft Deployment Agent\u00a0 Follow these steps to configure the Release Management Server and the Deployment Agent on […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts\/2123","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/users\/62"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/comments?post=2123"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts\/2123\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/media\/45953"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/media?parent=2123"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/categories?post=2123"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/tags?post=2123"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}