I believe I've found an error in "Professional Team Foundation Server". The last line on page 75 states that everyone needs write access to the file share for the drop location. I don't think this is correct. In fact I think everyone should have read access only so that no one can accidentally change the build output. Is there a reason anyone other than TFSSERVICE needs write access?

The user that runs the TFS Build Agent process needs to have write access to the drop location (to be able to push the build results to the share) as well as TFS Service. In TFS 2005 and TFS 2008 the permissions levels were even higher because of test result publishing everyone needed to have write permissions which is where I think this came from.

Let me check on the exact situation and I'll get back to you.

Apologies,

Martin.