New tool aids in evaluation of external auditors

Andy Snook of Fastpath and I did a joint audit compliance session at the GPUG Summit last week. Now I see in CGMA magazine that there is a New tool to aid in the evaluation of external auditors. You can download the tool directly from http://www.thecaq.org/resources/pdfs/AuditorAssessment.pdf.

The PDF is a little wordy but the whole document is about a dozen pages and include a couple of nice questionaires around auditor performance. This seems like a nice tool for the audit committee toolbox.

Microsoft Dynamics GP System Administrator: Should You Separate Accounting Controls and Duties? | MSDynamicsWorld.com

Over at MSDynamicsWorld, Gloria asks Microsoft Dynamics GP System Administrator: Should You Separate Accounting Controls and Duties?

In addition to Gloria’s look at how and when to use the SA account I would add a shout out to Fast Path’s Config AD which allows security assignment to be separated from security setup. This allows consolidated security assignment from centralized security group.

Config AD also allows single sign on based on Active Directory. This reduce risk since users have fewer passwords to remember, making them less likely to write them down. It also reduces password related support calls.

FastPath, Cookbook, Now

It’s almost too late but if you hurry you can still get FastPath’s Config AD, Audit Trail or other products with a 20% discount and a free Microsoft Dynamics GP 2010 Cookbook. You have buy by 12/31/10 so put down that leftover Christmas dinner and pick up the phone.

I picked Config AD as one of 10 products that MS should buy and incorporate into the core. It’s that good. Don’t wait for MS, they can take forever. Buy Config AD now and bring Active Directory integration and single sign on to your Dynamics GP implementation.

Cooking up Discounts with FastPath

The folks at FastPath are offering a great discount between now and 12/31/2010. Buy Audit Trail or Config AD for Dynamics GP before the end of the year and get a 20% discount off of the purchase price PLUS a free copy of the Microsoft Dynamics GP 2010 Cookbook!

Yep you read that right a 20% discount and a free Microsoft Dynamics GP 2010 Cookbook. What else could any self respecting Dynamics GP user want for the holidays?

For all the details email Jill at Jill@gofastpath.com

That Dangerous SA Account

Andy Snook of Fastpath has a great new article on dealing with the dangers posed by the SA account in Dynamics GP. He makes some great points and it is definitely a must read. So I thought that I would add my own thoughts in addition to Andy's.

• Some ISV apps can ONLY be installed using SA. Other techniques to avoid the use of SA don't work here. Frankly, this needs to be fixed by ISV's. It's a problem that people whine about but hasn't been addressed.
• Andy makes the point that SA does not have to be a power user. I agree, mostly. The catch 22 is this, most consultants expect SA to be a power user. In fact a common troubleshooting technique is to determine if SA can do something, since that often indicates whether a problem is security related. If you don't communicate that SA has limited rights you can spend a fortune on unnecessary troubleshooting. It's often one of those "slipped my mind" kind of things. Notice the issue is not limited SA rights but communicating that SA rights have been limited, since this is still surprisingly rare.
• Additionally, if security is NOT well setup, the presence of SA as a power user can be a lifeline when say, payroll checks don't print because of a security problem.

The SA user is a difficult subject because the line between lifeline and crutch is very blurry. However, we both agree if that companies take the time to setup security right, most of the issues around SA go away.

Fastpath Configurator AD Gets Better

I thought I would take a few posts today and highlight a few vendor specific items I learned at Convergence. We'll start with one of my favorites, Fastpath.

So I'm at the expo at Convergence 2009 talking to the Fastpath folks and unsurprisingly, their Configurator AD product is getting a lot of attention. Configurator AD allows true single sign on with Active Directory for Dynamics GP (and other Dynamics products). When I last looked at Configurator AD, users were authenticated against active directory and if full single sign on was enabled, the first screen that came up when launching Dynamics GP was the company login. That was pretty cool until I found out that the newest version goes farther.

In the latest release, if a user only has access to one company, that company just launches. All the authentication is handled in the background. For users with multiple company access, a default company can be set to allow them to bypass the company selection screen as well. Now one touch launching of Dynamics GP with full authentication is a reality.

Christmas Deal from FastPath

If you've been thinking about integrating Active Directory sign on for Dynamics GP using FastPath's Configurator AD, now is the time. FastPath is offering their Configurator SSO single sign on product for Dynamics GP free when you buy Configurator AD.

Starting the new year with Active Directory integration and Single Sign On for Dynamics GP is pretty sweet and two apps for the price of one is good for the budget too! This offer is only good through January 15 so get your staff simpler sign ons for Christmas.

Talk to the nice folks at FastPath for more info. When you do tell Andy I said hi but try not to laugh too hard at his Notre Dame Fighting Irish. He's sensitive about it.

Random Dynamics GP Observations, Gossip and Rumors

• Clients using FastPath's Configurator AD to manage GP logins via active directory are really happy with it. This would fall under observation, not gossip or rumor ;)
  
  
• Performance Point is on all the larger GP client's radar but not on their immediate task list. I suspect that they will be ready about the same time that Performance Point is ready for them, around version 2, with large scale adoption in typical Microsoft version 3 fashion.
  
  
• Dynamics GP 11 is rumored to be renamed Dynamics GP 2010 which will be really confusing since the current version is version 10.
  
  
• There sure seems to be more quality Dynamics GP bloggers coming out now. With Mariano Gomez, Dwight Specht and Dave Musgrave all blogging regularly now, I don't feel so lonely any more. Maybe Jivtesh will pick back up some.
  
  
• If your work with Dynamics GP makes you want to make fun of Accountants, go here.
  
  
• Dwight Specht owns more socks than any three men should be allowed to own.
  
  
  
  
  
  

GP 10 Security Article

Andy Snook of FastPath has a nice article on GP 10 security at MSDynamicsWorld.com. Most of you know that I'm a fan of FastPath's security tools and though the article is an overview, I learned a few things. For example, I didn't know that at login, GP sends the password through security 4 times. This is what plays havoc with the SQL server lockout policy.
Make sure you check out the whole article. I've also heard good things about FastPath's Configurator AD active directory connector for GP. We're looking at it for one of our clients and our tech guys have good things to say.

GP 10 Table Reference - 1st Pass

Andrew Snook of FastPath was kind enough to send me an Excel based table reference for GP 10 to include on the site. It's now up on the Download links to the right. (You give a little, you get a little, you pay it forward. That's how it works. )

I'm still planning on adding my per module table breakdown, similar to the version 9 file, as soon as I get GP 10 up on a test box. Hopefully this will happen in the next week or so. Little things like quarter end keep getting the way. I know, I need to get my priorties straight. I get it.

Back to work.

GP Rocks Podcast #7 - Andrew Snook of Fastpath

The newest episode of GP Rocks, our Dynamics GP podcast is now available. It's been a long time coming but we should be seeing more podcasts soon.

The Roadie

In this episode, I spend time with Andrew Snook of Fastpath Solutions looking at how their software can help with your Dynamics GP heavy lifting. Fastpath has some very hot modules right now for GP including their Audit Trail suite and their security product, Configurator, with an available Active Directory hook.

I'm user of their Audit Trail product and frankly a big fan of both the products and the company. They've been nothing but helpful. Must be an Iowa thing.

Andy needs a little cheering up given the current play of Notre Dame's football team so cheer him up by listening to this podcast.

You can find out more about Fastpath here.

You can subscribe to the GP Rocks podcast in your RSS reader or iTunes with this link. We're also in the iTunes podcast directory. Older podcasts are here.

Working Your SOX Off

SQL Server Central takes a look at Sarbanes-Oxley from a DBA's perspective in their Working Your SOX Off article. (Free registration required). There is some good solid advice in here. With this advice and a few third party pieces like FastPath's Audit Trail and Configurator software you can seriously smooth out the GP portion of your SOX compliance.

Not coincidentally, the next episode of the GP Rocks podcast is almost done and it's an interview with Andrew Snook of FastPath. Look for it here in a day or two.

GP is Having a Compliance Sale

Just in time for Audit Season, Microsoft is having a sale on compliance related modules for Dynamics GP.
Electronic Signatures and Audit Trails are 20% off. If you buy both you can also get Analytical Accounting, Field Level Security, Account Level Security, and Microsoft® Forecaster for $5,000.
Your partner can give you specifics. I can't point you to a website since the link I got from MS only takes you to the "ask for info" page and the discounts aren't listed on CustomerSource yet.
Speaking personally, we're looking at compliance products for GP. I've seen both the Audit Trails and Electronic Signatures products. My feeling is that they are both overpriced. Audit Trails in particular has several good 3rd party competitors that are considerably cheaper (Rockton, Fastpath) and they appear to have more functionality.
I would really argue that in today's world, the compliance stuff should be built in. Both Audit Trails and Electronic Signatures should have been part of a free enhancement pack. That would really add value to the annual maintenance fees.