Symptoms
Assume that you migrate a user account from one domain to another domain by using the Active Directory Migration Tool (ADMT) and security identifier (SID) history. In this situation, you cannot use the migrated user account to connect to a project in a Microsoft Visual Studio Team Foundation Server 2010 (TFS 2010) server. Additionally, if you re-grant the migrated user account access to the TFS server by using TfsSecurity.exe or the TFS membership GUI, the user account loses access within 24 hours.
Note The TFS 2010 application tier server is joined to a remote forest in relation to the migrated user account.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Resolution
To resolve this issue, install the following update rollup:
2722491 FIX: An update rollup is available for Team Foundation Server 2010
