Hello,
my apologies I didn´t be clear.
Command
mvn release:prepare release:perform -DuseEditMode=true
is run from windows command line.
As far as I know TFS there are two possibilities how to get source code. The first is
tf get
which makes read-only copy from server to client (Your geuss is correct - NTFS attribute is set to read only because of $tf get). The second one is
tf checkout
which makes writable copy from server. So maven is able to edit pom.xml. Jenkins makes the first one. I think that Jenkins should make checkout rather than get source code.
Feel free to ask if something is not clearly explained
Password is changed. My falt 
Sorry I don't fully understand what you have said.
is this from the command line or with Jenkins?
I don't understand what you mean by this.
When the release fails - what are the NTFS security permissions on the pom.xml file? Does it have the "read only" file attribute?
I'm not familiar with TFS but if the following contains your username and password I would suggest you change it "AC\papiez,Vy100ho500exit"