1
IT Health Snapshot
Environment Overview
Total Users
5
Named staff logins, plus 1 shared scanning workstation
Workstations
7
4 Dell OptiPlex 7070 units purchased 2020, past warranty since 2023
Servers
1
Dell PowerEdge T330, Windows Server 2012 R2, past extended support
M365 Licenses
1
Business Standard + Entra ID P1, plus 3 shared mailboxes
Device Inventory
All devices below are actively monitored under RMM.
| Device | Model | Purchased | Warranty Status | OS |
|---|---|---|---|---|
| Server (CASSVR) | Dell PowerEdge T330 | 08/16/2016 | Expired 2021 | Windows Server 2012 R2 |
| Workstation (CAS-PC11, Lori Flynn) | Dell OptiPlex 7070 | 01/04/2020 | Expired 2023 | Windows 11 Pro |
| Workstation (CAS-PC12, Melissa Jones) | Dell OptiPlex 7070 | 01/04/2020 | Expired 2023 | Windows 11 Pro |
| Workstation (CAS-PC14, Emma) | Dell OptiPlex 7070 | 01/04/2020 | Expired 2023 | Windows 11 Pro |
| Workstation (CAS-PC10, shared scanning station) | Dell OptiPlex 7070 | 01/04/2020 | Expired 2023 | Windows 11 Pro |
| Workstation (CAS-PC15) | MSI PRO ADL-U Cubi 5 | Not on record | Unknown | Windows 11 Pro |
| Workstation (Melissa's desktop) | Dell Tower ECT1250 | 11/03/2025 | Active to 02/2027 | Windows 11 Home |
| Workstation (Brie's laptop) | Lenovo IdeaPad Slim 5 | 06/26/2026 | Active to 06/2027 | Windows 11 Home |
Health Indicators
| Area | Status | Details |
|---|---|---|
| Patch Management | Review | Workstations current on Windows 11. Server OS (2012 R2) is past Microsoft's end of extended support and can no longer receive security patches. |
| Endpoint Protection | Active | SentinelOne deployed across all 8 managed endpoints (7 workstations, 1 server). |
| Server Backup | Active | Axcient cloud and local backup covers the server. |
| Identity / MFA | At Risk | MFA is not enabled on the licensed M365 account (Security Defaults disabled); local Active Directory has no native MFA. |
| Network | Active | Uplift gateway, switch, and access point in place and actively monitored; Vicinity will continue uplevel support under the new agreement. |
2
Application Inventory
Key business and document-workflow applications in use at Custom Accounting Services LLC, pulled from the installed software inventory.
| Application | Purpose | Vendor / Platform | Notes |
|---|---|---|---|
| QuickBooks (Premier & Enterprise, Accountant Editions) | Primary accounting and bookkeeping platform for client engagements | Intuit | Multiple year versions installed, 2017 through 2024, maintained to support client engagements across different QuickBooks versions. |
| SafeSend Exchange | Secure tax document exchange with clients | cPaperless | Installed on 2 workstations |
| Adobe Acrobat | PDF creation and editing for tax and client documents | Adobe | Installed on 7 workstations |
| Kofax PDF Viewer / PaperPort | Document viewing and legacy scan workflow | Kofax Inc. | Provides PDF viewing and scan-to-PDF capture for incoming paper documents |
| ScanSnap / PaperStream Suite | High-volume document scanning (Fujitsu fi-Series scanners) | PFU Limited (Fujitsu) | Supports paperless tax document intake |
| Microsoft 365 Apps for Business | Office productivity (Word, Excel, Outlook) | Microsoft | Installed on more devices than currently licensed (1 seat active) |
3
Security Posture
Security Stack
| Control | Solution | Status |
|---|---|---|
| Endpoint Detection & Response | SentinelOne | Active |
| Privilege Management | AutoElevate | Partial (6 of 7 workstations) |
| Email Security | Microsoft 365 Defender | Active |
| Multi-Factor Authentication | Not enabled on the licensed M365 account; local AD has no native MFA | Incomplete |
| Server Backup | Axcient Cloud + Local Backup | Active |
| Firewall / Network Security | Uplift UG-101A-1 Gateway, stateful firewall | Active |
| Patch Management | Workstations via RMM; server on unsupported OS | At Risk |
Key Findings
- The server (CASSVR) runs Windows Server 2012 R2, which is past Microsoft's end of extended support (October 2023) and can no longer receive security patches. This is the highest-priority risk in the environment.
- All 7 workstations are monitored under RMM with SentinelOne endpoint protection. AutoElevate privilege management covers 6 of 7; 1 device, most likely the most recently purchased (Brie's laptop, purchased June 2026), is not yet on the billed managed workstation agreement.
- Only 1 Microsoft 365 Business Standard license is active despite 5 staff using company workstations, along with 3 shared mailboxes of unclear licensing and protection status.
- A Microsoft 365 security review found Security Defaults disabled and no Conditional Access MFA policy in place on the licensed account.
Open Security Gaps
- MFA / Identity: MFA should be enabled on the licensed M365 account, since Security Defaults are currently disabled and no Conditional Access MFA policy is in place. Local Active Directory also has no native MFA.
- Home Edition Devices: 2 workstations (Melissa's desktop, Brie's laptop) run Windows 11 Home edition, which cannot join the local AD domain. Both are monitored under RMM with SentinelOne endpoint protection.
- Billed Workstation Coverage: 1 of 7 workstations is not on the current billed managed workstation agreement and is missing AutoElevate.
4
Recommended Initiatives
Strategic IT initiatives recommended for Custom Accounting Services LLC as part of the transition to a direct Vicinity agreement.
| Initiative | Priority | Rationale |
|---|---|---|
| Move to a direct Vicinity managed services agreement | High | Replaces the current DanTech-billed services with a direct Vicinity agreement. |
| Replace server (CASSVR) | High | Server OS is past end of extended support; hardware is 10 years old and out of warranty since 2021. |
| Plan workstation refresh for devices over 5 years old | Medium | 4 Dell OptiPlex 7070 units are approaching 7 years old and have been out of warranty since 2023. |
| Enable MFA on the M365 account | High | Microsoft 365 security scan shows Security Defaults disabled and no Conditional Access MFA policy in place; this is a low-cost, high-impact fix. |
| Add missing device to the managed workstation agreement | Medium | 1 of 7 workstations is already supported via RMM and SentinelOne but is missing AutoElevate and billed coverage. |
| Right-size Microsoft 365 licensing + add M365 SaaS Protection | Medium | Only 1 seat is licensed against 5 staff and 3 shared mailboxes; move to per-user licensing with MFA and backup coverage for M365 data. |
Thank you, Custom Accounting Services LLC.
We appreciate the opportunity to support your business directly. Our commitment is to keep your IT reliable, your data secure, and your team focused on what matters most.
Questions? Reach us anytime at support@vicinity.team · (866) 520-6414