How to: Verify or Correct Port Assignments

  • Article

By default, Team Foundation Server is configured to use specific network ports and network protocols. Your firewall solution controls remote connections and the usage of these ports. If the port assignments for a Web site have been modified, access to the Web site and Web services might be affected. For a list of Web sites for Team Foundation, see Resolving Problems Accessing Web Services.

You can verify or correct port-binding assignments made to Team Foundation Web sites and verify or correct port assignments made to Team Foundation services. For information about the default network port and protocol assignments, see Team Foundation Server Security Architecture.

If your organization is using a firewall solution other than Windows Firewall, see the documentation for that solution.

Note

Before you make any changes, you should determine why the port bindings for a Web site were changed. Organizations frequently change the default port assignments to match their infrastructure requirements or security policies.

Required Permissions

To perform these procedures, you must be a member of the Administrators security group on the application-tier server for Team Foundation.

To verify or change the port assignment for a Web site in IIS 6.0

  1. Log on to the application-tier server.

  2. Click Start, point to Administrative Tools, and then point to Internet Information Services (IIS) Manager.

  3. In the tree pane, expand the local computer, and expand Web Sites.

  4. Right-click the Web site whose port bindings you want to verify or correct (for example, Default Web Site), and click Properties.

  5. On the Web Site tab, verify or change the TCP Port value back to its default value or to one set by your organization's security policy.

  6. Click Apply to confirm the change, and then click OK.

To verify or change the port assignment for a Web site in IIS 7.0

  1. Log on to the application-tier server.

  2. Click Start, point to Administrative Tools, right-click Internet Information Services (IIS) Manager, and then click Run as administrator.

  3. In the tree pane, expand the local computer, and expand Web Sites.

  4. Click the Web site whose port bindings you want to verify or correct (for example, Default Web Site).

  5. In the Actions pane, click Bindings.

    The Site Bindings dialog box opens.

  6. Click Edit, and then change the port value to its default assignment.

  7. Click OK to confirm the change, and then click Close.

To verify or change the port assignments for Windows Firewall in Windows Server 2003

  1. Click Start, point to Control Panel, and then click Windows Firewall.

  2. On the Exceptions tab, verify that the check boxes for the programs in the following table are selected:

    Web site

    Port

    Default Web Site

    80

    SharePoint Central Administration Service v3

    17012 (if it was installed with Team Foundation Server; otherwise, randomly generated)

    Team Foundation Server 

    8080

    Team System Web Access

    5012

  3. Click each Web site, click Edit, and verify that the port number matches the number for the program as listed in the previous table or for your organization.

    Note

    The previous table lists the default ports. If your deployment does not use the default ports, you should verify that the port numbers are appropriate for your deployment.

  4. If the service is not listed, add an exception by performing the following tasks:

    1. Click Add Port.

    2. In the Name box, type the name of the service.

      This text does not have to match the product name. It just needs to be descriptive.

    3. In the Port number box, type the port number.

    4. Be sure that TCP is selected.

    5. Click OK.

  5. Click OK.

  6. Verify that the application pools and Web sites are running. For information about how to verify or restart an application pool or Web site, see How to: Verify or Correct the IIS Configuration for an Application Pool.

To verify or change the port assignments for Windows Firewall in Windows Server 2008

  1. On the Start menu, click Control Panel.

  2. Click Network and Internet.

  3. Click Allow a program through Windows Firewall.

    The Windows Firewall Settings dialog box opens.

  4. On the Exceptions tab, verify that the check boxes for the programs in the following table are selected:

    Web site

    Port

    TFS Portal

    80

    TFS WEB Services

    8080

    Team System Web Access

    5012

    WSS Administration

    17012 (if it was installed with Team Foundation Server; otherwise, randomly generated)

  5. Click each Web site, click Properties, and verify that the port number matches the number for the program listed in the previous table.

    Note

    The previous table lists the default ports. If your deployment does not use the default ports, you should verify that the port numbers are appropriate for your deployment.

  6. If the program is not listed, add an exception by performing the following tasks:

    1. Click Add Port.

    2. In the Name box, type the name of the program.

      This text does not have to match the product name. The text just needs to be descriptive.

    3. In the Port number box, type the port number.

    4. Be sure that the TCP is selected.

    5. Click OK.

  7. Click OK.

  8. Verify that the application pools and Web sites are running. For information about how to verify or restart an application pool or Web site, see How to: Verify or Correct the IIS Configuration for an Application Pool.

See Also

Tasks

How to: Verify or Correct Server Binding Assignments

Resolving Problems Accessing Web Services

Resolving Problems Connecting to the Application-Tier Server

Concepts

Team Foundation Server Security Architecture

Other Resources

Correcting Connection and Configuration Procedures