Today I tried to add a user to an existing TFS Team project, this user had happily been working on other team projects hosted on the same same server. In theory all I had to do was add the AD user to an existing AD group that was already setup as a contributor to the team project I now wanted them to work on.
However when I did this I got the error “TF14044: Access Denied: User DomainName\username needs the CREATE_PROJECTS global permission(s)” when they tried to load the Source Code Explorer tab in VS2005. Basically they could not see any files or the directory containing them.
To cut a long story short, I rebooted the TFS front end server and this appeared fix it. All I can assume is that the new user rights had not passed though all the various caches in the system.