Category: application hosting

Posted on

Hosted QuickBooks Need Drives Hosted QuickBooks Approach: QuickBooks Desktop Editions in the Cloud

Intuit QuickBooks essentially “owns” the accounting/bookkeeping software market in the US, having an enormous share of distribution and millions of users.  Even with the emergence of new web-based and SaaS solutions designed to address the needs of small business bookkeeping, the visibility and momentum of the QuickBooks brand has kept it in the lead position and users continue to adopt the QuickBooks desktop and online editions in record numbers.  What may be a surprise to folks who believe “the desktop is dead” is the reality that quite a lot of the adoption and usage continues to be centered on the QuickBooks desktop edition products rather than the purely Online, SaaS product, and this is at least in some part supported by the hosted QuickBooks service model.

The desktop is dead. Long live the desktop!

Software-as-a-Service and “the cloud” have become the focus of the entire information technology industry, and this new paradigm of computing continues to evolve and reveal potential at every level.  What’s interesting is that the paradigm – which involves mobility, anytime/anywhere access, managed service delivered as a utility subscription, and more –  is bringing new life to what many have come to refer to as “legacy” applications (like QuickBooks desktop editions).  While many technologists would have us believe that the traditional desktop is dead, the reality is that the traditional part of it is all that may be dying… the desktop and what it offers and represents isn’t dead at all.  In fact, it’s very much alive and well and continuing to do what it was intended to do, perhaps a bit better, due largely to advancements in desktop and application virtualization and other discoveries.

Several years ago the Application Service Provider model established itself, positioned to provide hosting of business applications as a subscription service (“several” is somewhat of an understatement; the first real ASPs emerged around 2000-ish).  Using Windows Terminal Services and other tools, these early providers recognized the benefits of hosted and managed desktops, and further recognized that the value of the service existed largely with the applications and not simply the outsourced desktop.  Back then, there was an awful lot of talk about how the “desktop is dead”, because delivered applications would become the norm.  Then the dotcoms busted and a lot of ASPs went out of business, leaving a rather poor taste in the mouths of consumers and independent software vendors (ISVs) alike.

As web-based, SaaS and “cloud” solutions began to emerge and prove their viability, business users returned to the web in search of solutions to mobility and secure remote access to business applications and data.  While a great deal of success has been realized by many of these SaaS solution providers, there has remained a significant need and desire for desktop applications, desktop presentation, and desktop functionality.  The adoption by the market of SaaS and cloud services eased the adoption of hosted application services, as well, and now there are a wide variety of providers offering an equally wide variety of hosted and virtualized desktop and application services (application services like hosted QuickBooks, for example).

The popularity of the QuickBooks desktop products, coupled with new capability offered through advancements in hosting and application delivery solutions, directly address the desire of the market to eliminate complexity and reduce cost of IT operations.   Hosting is somewhat of an “equalizer” between QuickBooks desktop and QuickBooks Online, allowing the QuickBooks desktop users to have the same managed subscription service as Online Edition users, but with the rich features and full functionality present in the desktop editions.  Businesses wanting to run QuickBooks in the Cloud are not forced to transition to the product which may not fully meet their needs, or which is simply unfamiliar to them – they can continue to utilize their trusted QuickBooks desktop editions, only in a hosted/delivered environment.

Here’s the catch:  It’s a good idea to only work with an Intuit-authorized Commercial Host for QuickBooks, because there is no other lawful way to obtain QuickBooks hosting services from a service or solution provider.  No, it is not lawful to provide QuickBooks hosting services unless the hosting provider/service is actually authorized by Intuit to do so, and anybody using QuickBooks software has already agreed that they will not utilize the software with a hosting provider or similar entity without specific authorization.  The hosting provider risks being targeted for unauthorized software distribution, and the customer risks losing their right to the software and services by violating the EULA terms.  Even if the software doesn’t cost a lot, businesses will recognize that their business data has value, and keeping their software in a usable and properly licensed state is necessary to preserve the value of that data.

The End User License Agreement for QuickBooks products – an agreement between Intuit and the consumer – spells it out in plain language and describes specifically how the QuickBooks product is NOT eligible to be hosted, or provided by a hosting service. Note that this includes situations where the hosting company is providing the actual QuickBooks software, and in situations where a business already has their QuickBooks software and provides it to a commercial hosting company to have it installed and managed and provided to users.  In short – QuickBooks is not supposed to be installed and managed by a 3rd party hosting provider who is not authorized by Intuit as a commercial host for QuickBooks regardless of whether or not the customer provided the license.

Further, by accepting the EULA in order to use the QuickBooks product, users accept the fact that Intuit has the full right to terminate that license in the event that terms of use are violated.  Remember that these license agreements provide USE RIGHTS, not ownership, of the product.  You have to use the solution under the terms and conditions of the license, or you lose your rights to the product, support, or any other benefits included.  http://support.quickbooks.intuit.com/support/articles/INF20630

Why Businesses Use QuickBooks Hosting Services

The reasons why businesses elect to have their QuickBooks solutions hosted come in many forms, which explains why there are a variety of options for getting hosted QuickBooks service.

For users of the QuickBooks Enterprise products, managed IT service may be the primary goal in adopting a cloud hosting model.  Hosted and managed IT services, including hosted desktops and managed applications, allows the business to benefit from predictability in IT cost and to transition from a regularly scheduled capital-intensive upgrade cycle to a consistent and budgetable operational expense.

Users of QuickBooks Pro and Premier, on the other hand, are more likely to see mobility, remote access, and real time collaboration as the primary benefits of a hosted model.  While the small business owner will frequently argue about the true cost of IT management (which is pretty arguable when the totality of their infrastructure consists of a standalone PC), it is the access to the application and data at any time and from anywhere that gets this single user online – generally with a smart phone or tablet computer or some such mobile device accompanying the requirement.

In many cases, there are other drivers in the business moving the organization along the path towards “cloud enablement” of their solutions, and QuickBooks is simply one of the products to contend with.  Hosted QuickBooks may not be THE REASON for going to an online working model, but it is one of the core components which can cause the project to either see success or fail miserably.

I have seen situations where an entire organization’s computing infrastructure was re-deployed as SaaS service, but the one critical thing they forgot was the controller’s requirement for QuickBooks Pro.  Months of time and many dollars were invested in moving the rest of the company to online application service, only to find that they all returned to local application use because of the requirement to work collaboratively with the controller and with reports and data produced through QuickBooks.  On the other hand, I’ve also seen where the accounting department was the only group moved to the hosted environment (in this case, the provider was focusing on QB and not on the rest of the business requirement), and this group also returned quickly to local operation in order to continue collaboration with internal team members and to benefit from the integration of applications (e.g., QuickBooks working with MS Office, etc.).  One size certainly does not fit all, and any purchaser of a hosted QuickBooks solution should keep in mind the entire business requirement in case QuickBooks is only a piece of the puzzle (albeit an essential piece).

Hosted QuickBooks may come as a published or managed application, as a desktop application on a remote or virtual desktop delivery, or as an application“delivered” to the user’s PC.  In any case, whether QuickBooks is viewed as a point solution – delivered alone as a single application – or whether it is part of a larger virtualized desktop or application deployment, it remains one of those products that satisfies a fundamental need in small businesses, and now it’s available in the cloud.

Joanie Mann Bunny FeetMake Sense?

J

Posted on

via Accounting and Business Technologies | QuickBooks Pro and Premier as Software-as-a-Service

QuickBooks Pro and Premier as Software-as-a-Service

Running business applications online was once considered a fad, but has now become a mainstream approach to implementing technology. Businesses large and small are finding that turning technology investments into a predictable expense allows them to focus on their business operations and not the IT budget. For some, the ability to bring remote locations or mobile team members closer to the systems that support the business is the biggest benefit. For others, the security of having business continuity and disaster recovery built into the system is the key. Regardless of the motivating factors, business owners are finding that online application services can make a positive impact to their bottom line.

The market has clearly identified online technologies and application services as something beneficial. This is demonstrated by the rapid adoption and growth of business solutions that leverage the Internet as network. Further, online applications and services are being used as a way to augment systems that were once exclusively LAN or PC based. An example of this is the extension of Intuit’s QuickBooks products to incorporate online payroll services and online payment processing solutions.

With the move to online application services being one of the biggest shifts in technology seen in years, it only makes sense that the applications that have become “standards” in business shift to an online model, as well. The opportunity is great, but the responsibility is greater.

Many software companies are facing a number of problems with respect to the unauthorized hosting of their desktop applications. Because of the technology employed for desktop application hosting is very costly, many service providers feel compelled to “leverage” application licensing and other system features to increase their value proposition and in order to compete. Customers who utilize these unauthorized application services are putting their businesses at potential risk. This risk may come in the form of substandard services resulting in lost or corrupted data; risk may come in the form of unauthorized access to confidential business or personal information due to poor system security; risk may come in the form of exposure due to the unauthorized use of software licenses.

While the market has clearly demonstrated the value and benefit of application hosting services, the lack of protections, consistency and support make it a venture fraught with peril for many. The volume of “grey market” activity and instances of license piracy have undoubtedly increased dramatically, as the cost of service delivery is high and the margins for the service provider are narrow. Manipulating the cost of service by leveraging the application licensing is sometimes the only way some service providers can create profitability in their offerings. But with the prior lack of oversight in terms of service pricing, licensing, quality assurance, or service orientation, it had become the “wild west” for service providers, and the perceived value of the service declined while the number of and variety of deliveries increased.

The answer to the problem, or at least as it exists around the Intuit QuickBooks products, is in the ability for Intuit-Authorized QuickBooks hosting providers to offer subscription access to QuickBooks Pro and Premier licenses when they are hosted. Customers no longer need worry about purchasing their QuickBooks software before engaging with the hosting company, and can avoid the annual cost of upgrading their application software. With the QuickBooks license delivered under a subscription program, customers are able to work with the most current version of the software, and know that their systems are protected and their data is secure. Intuit-authorized QuickBooks Hosting providers can supply, manage, and maintain hosted QuickBooks implementations for businesses of virtually any size and type – all with an Intuit-supported license.

via Accounting and Business Technologies | Joanie Mann: QuickBooks Pro and Premier as Software-as-a-Service.

Posted on

Criteria for Evaluating QuickBooks Hosting Providers: Going Beyond Pricing

Criteria for Evaluating QuickBooks Hosting Providers: Going Beyond Pricing

When a small business elects to run their QuickBooks desktop edition software in the “cloud”, it makes sense to work with an experienced provider – a company with the people and the experience to keep the QuickBooks desktop software working properly and securely.  The keys to selecting the best provider for the business are often hidden in the experiences of others; experiences which reveal issues that may significantly impact vendor selection and which have nothing to do with the price of the service. Criteria such as system performance, responsiveness to technical issues, resources for self-help, and knowledge of support personnel – these are the things that more frequently and directly impact the customer experience and, ultimately, the customer’s loyalty.

While Intuit supports QuickBooks Enterprise in terminal server and Remote Desktop environments, they only support the license when it is deployed for the single business organization the license was issued to. If a business has lots of different users on the platform and those users don’t belong to the one company who “owns” the infrastructure and the license, then the implementation is non-compliant and won’t be supported. Intuit also doesn’t offer direct support for QuickBooks Pro and QuickBooks Premier editions in remote desktop implementations, yet the software will work perfectly well in that environment. There are a few quirks and tricks to using the software in this manner, however, so provider technical experience specifically with QuickBooks is essential.

When working with a company providing managed application hosting services and not just managed server platforms, it generally means that the provider is taking responsibility not only for the server/network/infrastructure, but also for the setup, configuration and maintenance of system users and security, and the installation/management/maintenance of the applications running on the server.  When a business elects to outsource this level of service to any 3rd party, there are a variety of areas in addition to pricing which should be thoroughly explored prior to signing the service agreement.

When evaluating potential service providers, research the provider’s offerings and performance directly as well as evaluating the public’s perception of them, considering these 4 areas:

  1. Technology
  2. Innovation
  3. Business Practices
  4. Customer Satisfaction

The technology evaluation relates not only to the systems and tools applied to the service delivery, but also to the systems or tools applied to assist the customer with dealing with the service.  Too often, providers pay more attention to their ordering systems than their service delivery, believing that a quality customer experience rests more with simple purchasing processes than with a functional and well-performing application service.  Others may focus on delivering the best and highest quality application service, yet relegate their clients to sending emails or making phone calls to place service orders or request service information.  The providers who score the highest points in this category are those who recognize that both elements – service delivery and service administration – are critically important to providing a quality overall customer experience.

The innovation evaluation looks at the actual service infrastructure and delivery. This includes features as well as limitations.  One of the pitfalls of being an application service provider is the inertia created with existing systems and customers.  Once the platform is in place and there are a bunch of users on the systems, upgrading and updating the underlying technologies can be a tremendous challenge.  I have often related this as being like trying to change tires on a moving truck.  Unfortunately, systems age and lose functionality, compatibility, support, etc.

Keeping the platform updated isn’t the only element involved with scoring provider innovation.  Even more important than simple change management supporting status quo, true innovation speaks to efforts directed towards crafting a better, more functional and more useful solution delivery.  Many skilled technicians can set up a terminal server for remote access to QuickBooks using the “standard” tools available, but it takes more skill and understanding to create a service which offers more and better capability than everyone else.  The point isn’t that the provider is changing QuickBooks software in any way – that’s not really an option.  Rather, it is in how the provider elects to architect their systems and solution, and whether they are attempting to improve the experience and deliver with a unique approach rather than a generic one.

With increased competition and as some provider platforms experience challenges either due to age or capacity, certain “interesting” practices have emerged.  I now look at these business practices as part of the process of evaluating providers.  In the early days of hosting and application delivery, the business practices of various providers had some similarities, but not any more.  The practices which frustrate me most and which always cause me to score the provider with low marks in this category relate almost exclusively to transparency – or lack thereof.  Here are two scenarios which I’ve seen come up with some frequency, and which (in my opinion) are indications that the provider may not necessarily be one you want to work with.

  • A business has signed a one-year service agreement with a hosting provider, and has been required to prepay that annual contract.  The business was not provided with a demonstration or evaluation system prior to executing the service agreement; they simply trusted the information provided by sales.  After a few months on the service, the performance and support are so poor that the business wants out of the annual agreement, even though high service levels and support responses were part of the contract.  In order to be allowed to end the service agreement and stop paying for the service, the business was told they would have to not only buy out a portion of the remaining contract, but also sign an agreement not to communicate the service problems they experienced or the exit agreement terms with anyone. (*please note that I am essentially in agreement about having to buy out a committed term agreement, at least in part, but applying a gag order? Not so much).
  • A business is using the services of a hosting provider, and has a need to know details of their delivery (like server operating system version) in order to verify compatibility with a new software product they wish to purchase.  Before the business customer is allowed to obtain the information, the provider requires that they sign an agreement promising not to disclose the information they may receive to any other party.  (*note: While I recognize that this type of agreement is desirable to protect proprietary information, it is more often used to prevent the prospective customer from disclosing something potentially negative, and it certainly doesn’t do much in terms of building trust.)

The final evaluation is on customer satisfaction, where anecdotes and information is collected from both current and past customers of the provider.  Admittedly, much of this information I scour from various forums and discussion groups and interviews but it is truly amazing what you can learn about a business simply by listening to customer stories in various social venues.  The picture these stories paint is often (frequently!) very different from the “happy sunshine and rainbows” testimonials you find on websites and in marketing brochures.  Of course, who would buy from a provider who says their “support is great until you’ve been with us for a month, and then we pretty much don’t care about you any more”.  Also, people tend to be more vocal when they’re mad about something, so there is often more negative than positive out there in the social realm, so weight that carefully.  But the fact that certain provider names come up more often than others is the clue; when you don’t see the provider name come up in these discussions, it usually means they’re simply not making people mad.

There is a lot to consider in selecting the right service provider for the business, and the items listed above are just part of it.  While there are some (few) standards among application service providers, it is still what some might refer to as an “emerging” model and will continue to evolve with the market demand and technology.

For now, businesses just need to know that their solution provider is trustworthy and willing to communicate honestly and completely. Selecting the right provider – a provider who supports their business and model with full transparency to the client –  will help the business move forward just as the wrong provider is more likely to hold it back.  While pricing is an important and unavoidable aspect of the discussion, businesses should also put some focus on these other elements which help to reveal how the provider works with their customers, and to determine whether or not they can (or will even try to) meet your requirements now and in the future. 

Make Sense?

Joanie Mann Bunny FeetJ

Posted on

Many Companies Are Negligent About SAP Security, Researchers Say – CIO.com

Is your hosting service provider helping to keep your critical business applications secure?  It is not enough to simply harden machine images and develop policy-driven access; application hosting providers need to understand the vulnerabilities introduced by each and every application in the environment.  Otherwise, the system could be exposed to threats directed specifically at the application environment and opportunities it presents.

Many hosting providers will offer customers service for any business application they have, and often provide those services with no significant experience or expertise in dealing with configuration or security issues specific to those applications or environments.  Consider the following report from IDC which indicates that numerous SAP deployments remain vulnerable to attack or intrusion, even though SAP has improved security of the products. The problem rests not exclusively with the SAP applications, but also with the approach to implementation of systems and security around those applications.  Understanding the various vulnerabilities introduced with SAP products is the first step to securing them.  Certainly a skilled IT solution provider is likely to offer a high level of service and capability, but there may be issues presented by various products (like SAP) which introduce additional or unique considerations, and it is important for the service provider to be aware of and address them.

Joanie Mann Bunny FeetMake Sense?

J

IDG News Service — SAP has significantly improved the security of its products over the past few years but many of its customers are negligent with their deployments, which exposes them to potential attacks that could cripple their businesses, according to security researchers.

The biggest issue is that companies expose insecure SAP services to the Internet — not only HTTP services, but also critical administrative interfaces, Alexander Polyakov, chief technology officer at ERPScan, a developer of security monitoring products for SAP systems, said Tuesday.

Between 5 percent and 10 percent of companies that use SAP products expose critical services to the Internet that shouldn’t be publicly accessible, Polyakov said. This happens because they want to enable remote management or because of improper configurations, he said.

Most of the services have vulnerabilities that can be easily attacked, Polyakov said.

Publicly available exploits exist for many SAP vulnerabilities, including some that are part of Metasploit, a popular security testing tool.

The percentage of companies with exposed SAP services differs from country to country. The situation is better in North America and Europe and worse in the Asia-Pacific region, Africa and Latin America, Polyakov said. However, even 5 percent translates to a very large number of companies, he said.

via Many Companies Are Negligent About SAP Security, Researchers Say – CIO.com.

Posted on

HIPAA Privacy and Security and the Cloud

jmbunnyfeet

HIPAA Privacy and Security and the Cloud

Is your cloud solution or hosting service HIPAA compliant?  This is among the most frequently asked questions from professionals shopping for cloud hosting service.  Unfortunately, it is also among the questions most frequently answered with ambiguity, or with naiveté.  The problem is that many businesses dealing with HIPAA compliance responsibilities as it relates to protection and security of personal health information may not fully understand their responsibilities as they extend to outsource IT and other service providers.  In the case of HIPAA compliance, many providers suggest their compliance without truly understanding what it means, and are introducing significant risk to their business and subscribing customers because of it.  With recent changes in rules relating to protection and control of personal health information, it is not just the health care provider, the health plan, 3rd party administrator or others that process health insurance claim information which must agree to provide adequate controls – the requirement may fully extend to business associates of these entities… possibly including their cloud service or hosting solution providers.

Some of the largest breaches reported to HHS have involved business associates. Penalties are increased for noncompliance based on the level of negligence with a maximum penalty of $1.5 million per violation. The changes also strengthen the Health Information Technology for Economic and Clinical Health (HITECH) Breach Notification requirements by clarifying when breaches of unsecured health information must be reported to HHS. http://www.hhs.gov/news/press/2013pres/01/20130117b.html

HIPAA guidelines and rules exist to protect and secure personal health information, a requirement growing in importance with advancements in technology, electronic health records, e-billing solutions, and cloud computing adoption.  Where the regulations were once focused on the entity directly involved in generating or processing the information, the view is now extended not only to 3rd party administrators, but also to the technology solutions and providers involved.  When a “covered entity” (an entity with a responsibility to protect and secure personal health information [PHI]) makes a decision to move this information to the cloud, a number of important and complicated issues must be addressed in the agreements with the service or solution provider.  These issues include security and privacy of information (including providing individuals the right to access and request changes to the stored information), tools which may be provided to allow the customer additional security protection, encryption of data at rest and in transmission (and who holds the keys), data location, return of data, disaster recovery, and service levels.

Cloud provider contracts and business associate agreements with cloud providers are not one-size-fits-all and should be negotiated carefully to protect PHI in a manner that accurately reflects the capabilities of the parties http://www.americanbar.org/content/newsletter/groups/labor_law/ebc_newsletter/12_winter_ebc_news/ebc12winter_cloud.html

The provider delivering cloud hosting services to the business may now be considered to be a “business associate” under HIPAA, meaning that the responsibilities of the Customer (the “covered entity”) also extend to their service provider. For any business operating under a HIPAA compliance requirement, moving to the cloud must necessarily involve a detailed discussion and set of agreements that spell out the “business associate” relationship as well as the details of the service delivery and accepted performance levels.

Joanie Mann Bunny FeetMake Sense?

J

Posted on

QuickBooks In-House Hosting Services for Accountants

QuickBooks Hosting Services for IT-Capable Accountants

DIY-SelfHostingSmall businesses in large numbers are looking to the cloud as a platform to deliver solutions for the problems of escalating IT costs, mobility, and remote access to business data. The cloud is also becoming the recommended platform for the delivery of services from accounting and bookkeeping professionals, as the benefits of remote data access and real-time collaboration nicely address the requirement for accounting pros to exchange and share information with their business clients. One of the popular “cloud” hosting solutions addressing a collaborative accounting model is a hosted application approach to using Intuit QuickBooks desktop products. While accounting professionals may be aware that QuickBooks can be hosted by 3rd party providers, many firms are not aware of what is referred to as the “self-host” model, which is a QuickBooks hosting model for accounting firms with some in-house technical capability.

For small businesses and many accounting service providers, working with a 3rd party hosting provider makes a lot of sense, as the host has the infrastructure and the support organization necessary to service large-scale hosted customer requirements.

On the other hand, there are a lot of accounting and bookkeeping firms which have skilled in-house IT personnel who are more than capable of creating a hosting environment to serve not only their internal needs, but also to meet basic requirements of the QuickBooks-using clients they work with. It makes sense to explore the possibilities of implementing a “self-hosting” model for client access to QuickBooks, overcoming the cost and other barriers involved with 3rd party hosting services.

When an accounting firm works with a number of clients with QuickBooks desktop edition files, the firm has to install and manage not only their own software products, but also the relevant QuickBooks software products in use by the various clients (must have the right QB program in order to open the QB data file). This often puts an undue burden on the internal IT systems of the practice which has its own internal-use software and systems to support. With an internal hosting approach, the firm can provide standardized/centralized application hosting services to their clients, building their own “economy of scale” on the platform and reducing the IT management while achieving all the real-time and remote access benefits of an outsourced hosted model. The firm does not experience a retail cost for a hosting solution, and the cost to host the client is generally offset through the efficiency gained at the firm level through direct access to client data and applications.

The technical model for delivering hosting services to a relatively small client base is not overly complicated. Commercial service providers have complex architectures because they must serve a large and diverse client base, and they never really know what sort of devices (computers and printers) or connectivity the customer may have. Commercial providers have to be prepared to deal with any and all situations, where a “self-host” firm needs only to concern themselves with supporting their particular client users and use cases. Additionally, when the solution is offered as part of the accounting or bookkeeping service, the support requirements of the customer tend to be focused during mutual working hours, as opposed to the 24×7 support demanded of the commercial host.

As accountants and bookkeepers search for solutions to improve efficiency, increase profitability and differentiate services, it makes sense for those serving QuickBooks desktop clients and having an in-house IT capability to explore becoming a QuickBooks self-host. It is one possible way to eliminate cost as a barrier to working closer with QuickBooks desktop clients while providing the mobility and collaboration businesses need.

 

Make Sense?

Joanie Mann Bunny FeetJ