RSS

Category Archives: Compliance

Slaying the dragon and saving the princess – audit style

10 Aug

We all love stories—all of us. We love to hear about good overcoming evil – the prince saving the princess, the bad guy that the good guy captures.  In short, what we love are fairy tales.  The reality is we do not live in a world of fairy tales, and sometimes, yeah, the bad guys do win. The prince, admired by many, is not such a good prince after all.  We trust without knowing they can be trusted.  So, what does this have to do with audits?

Businesses are built based on one concept – to solve a customer’s problem.  You are their hero to save whatever pain they have or problem they can’t seem to overcome.  You are (as the story goes) their knight in shining armor.  Your customer needs someone to deliver a solution; you are just the good guy to do it.

Fast forward a couple of years, your business is booming, your customers are happy, and in walks every IT nightmare…the auditor.  Eyeglasses the size of saucers, a necktie tied just a shade too short, and a laugh that is about as annoying as a nail on a chalkboard; you succumb to a software audit.

How do you defend such evil?  The biggest mistake a hosting partner (or enterprises in general) often makes is fear.  They give the auditors everything they ask.  That’s not always bad, but if you don’t understand why they ask for certain things or feel they are painting you in a corner, take a step back.  Please don’t give in without understanding what they are asking and why.  Why do they want to know who your customers are?  Why do they ask about customer-owned licenses?  Software Assurance? Historical information?  If you can’t answer “why,” maybe you need help.  In walks SPLA Man.  Nah, in walks Mrs. SPLA Man, every auditor’s worst nightmare.  She put together the following list on how to better prepare yourself for the unexpected.

Mrs. SPLA Man’s List

Don’t be fearful – no matter what, it’s your business and YOUR customers.

Have a plan.  Know what’s in your customer agreements.  If you need to refresh your agreement language, do it.  Software licensing rules change daily; if you have not updated your contracts on license mobility or datacenter outsourcing, update it now.

Don’t bring unwanted attention to your organization.  Always report usage on time and pay on time.  80% of all delinquent reporting has nothing to do with the reseller or Microsoft.  It has everything to do with an SPLA partner’s account payable dept.

Don’t have one person manage your usage reporting.  In many cases, a person leaves a company who was the only one who worked with the reseller directly.  When that person leaves, who is responsible for reporting?

Advertisement
 
Leave a comment

Posted by on August 10, 2017 in Compliance

 

Tags: , , , , , , , , , ,

Don’t be Jimbo

24 Jul

Jimbo had a small IT firm for which he provided backup, security, and hosting for two clients.  He also purchased Office 365 licenses for a handful of users directly from the Microsoft Office 365 website and would bill them accordingly.  Jimbo also had an application he tried to develop to help end users better communicate with one another. It was similar to SharePoint, but more seamless and had better integration with third-party applications.  He had a SPLA, and had one person who submitted their usage report to their reseller.  Unfortunately, that person got sick and passed away.  Jimbo was sad and so was the rest of the staff.

To put his mind at ease, he spent every waking hour improving his application.  He thought it was going to be the next best thing.  I experienced the application firsthand myself, and found it to be a powerful tool.  I even asked to invest in it, but without any money, (Mrs. SPLA Man spent it all at Target), I had nothing to invest with.

Fast forward a year later.  Jimbo is still working on improving the application, and he's still hosting.  One day, Jimbo received an email from Microsoft.  It was titled “Self-Audit”, Jimbo was getting audited.  One thing left unmentioned, Jimbo is the nicest guy on the planet. He replied to Microsoft and in the end, provided them with everything.  All his server information, customer name, and reporting history.  It was an auditor’s dream.

Several weeks later, Microsoft provided Jimbo with the findings.  He owed $450,000 in unreported licensing fees.  Why so high?  No usage was being reported since the lady who reported SPLA passed away.  When she was reporting, she reported the wrong thing.  Instead of licensing Windows Datacenter, she reported Standard.  Instead of reporting physical processors and/or cores, she reported per VM.  Everything was a mess.  Jimbo, who neglected his hosting practice for months to focus on his application, was left feeling very uncertain about his future.  He did not have the funds to pay for licenses.

It’s unfortunate, but Jimbo had to shut down his hosting business.  The application he built?  Stopped.  He tried to sell it, and last I heard very few were interested.

Why such a depressing story and was it true?  Yes, the story is true (although slightly embellished).  Why share it?  I am telling you the story because there are too many organizations doing the same thing.  They have one person who manages the licenses, one person who was in contact with the reseller, and one person who knew what they were reporting.  What happens if that person leaves?  Too many organizations are also buying Office 365, but not getting the best discount.

Licensing is challenging, and in the case of Jimbo, his love wasn’t reporting usage, it was developing an application.  He should have had allocated resources to help manage his SPLA, so he could focus on what he knows best, the technology.

I am always asked why I created splalicensing.com and what's so different about SPLA Man than other blogs.  I think the main difference is honesty.  I am your licensing Siri or Alexa.  I am SPLAlexa. (that was bad).  Don’t be Jimbo.

Thanks for reading,

SPLA Man/SPLAlexa

 

 

 

 

 

 

 

 
Leave a comment

Posted by on July 24, 2017 in Compliance

 

Tags: , , , , , , , , , , , , , , , , , ,

What is a Service Provider?

18 Jul

The year 2017 has brought on A LOT of change for the hosting community.  A hosting company used to be an organization that hosted Exchange – fast forward to today and a service provider takes on a whole new meaning.  In this article, we will take a look at defining a service provider and how it applies to licensing.   Let’s play a little game called “Do they qualify”  Have a question?  Email info@splalicensing.com

An organization that provides or extends  litigation software (that they leased from the publisher) to law firms and other legal entities who are not wholly owned by the organization providing the solution. Does this organization qualify for SPLA?

Yes.  If you are an avid reader of splalciensing.com, you probably read my article on EMR Software The same holds true for any software (not just EMR) that runs on Microsoft technology that you do not own, but lease from a third-party.   Remember “AS”  If you are providing software AS a service that’s hosted from your datacenter environment,  SPLA must be part of the equation.  Why does this solution qualify for SPLA?

#1 they don’t own the software they are hosting

#2 they do not own the organization(s) who are consuming (using) the software for their benefit.

An organization who sells a product on a website to external users –   do they qualify for SPLA?

No.  Although they are selling something to consumers via the internet, the software used to deploy the solution benefits the e-commerce company, not the end-user.   Where SPLA does fit is if the web company decides to host a website on behalf of another organization.  The web company would fall under the SPLA rules.  Who benefits from the access is a key question to ask yourself.  Second question – is the access used to run their business or my own?

An organization who provides SharePoint to end users to share information.  Do they qualify?

No.  Simply sharing information does not qualify.  If the organization was hosting SharePoint on behalf of another organization, that’s SPLA.

A company hosts Exchange on behalf of another organization but does not charge for this access.  Does this qualify for SPLA?

Yes.  Microsoft doesn’t care how much money you make from the solution.  The question remains – are you providing this “as a service” for a third-party?

A company decides to use AWS as their datacenter provider to host an application they use internally.  Do they need SPLA?

No.  In this example, you are the end-user.  AWS has a SPLA to cover all infrastructure products they host on your behalf.  If you were to use AWS as a datacenter provider to host SharePoint to your end customers employees; you would pay AWS for Windows and SQL and report on your SPLA SharePoint SAL licenses.

 

I have 25 Linux machines that I host for my customers.   Do I need SPLA? 

No.  You have 25 Linux machines.  If you had 24 Linux machines and 1 Windows VM, you would have to license the host machine to cover that Windows VM through SPLA.

My reseller told me I didn’t need SPLA because the access qualifies for Self-Hosted.  The auditors told me it does not qualify.  Why?

All software used to deploy the solution has to be self-hosted eligible.  I bet you are running an application that does not qualify as part of your solution.  This would be SPLA.  Secondly, if you did not buy the software with software assurance, that is out of compliant.

Thanks for reading,

SPLA Man

 
Leave a comment

Posted by on July 18, 2017 in Compliance, Uncategorized

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

Top 5 Compliance Trends for MSP’s and SPLA

05 Jul

There are so many license changes and gotchas with SPLA, Azure, AWS, and all the others that I thought I would highlight for you some of the trends we see when it comes to compliance.

  1. Licensing Office Standard when Office Professional is installed.  In many cases, an IT administrator will inadvertently install Office Pro, report Office Standard to their procurement team who in return reports it to the reseller.  The IT admin will leave the company, and the procurement team continues to report Standard not knowing Pro is installed until audit time.  In this situation, Microsoft will check when Office was installed, and take the delta of what was reported (STD) v. what should be reported (Pro).  Don’t make this mistake.  Many partners are only charging their customers for Standard pricing!
  2. Not reporting SPLA at all.  Sounds silly, but many providers focus on developing software and not on the licensing.  We have found instances in which the procurement manager (who was in charge of reporting SPLA) left the organization and no one else took over their responsibility.   The reseller continues to email the procurement manager but obviously the email goes unnoticed.  After many months, their SPLA will be terminated and all licenses will have to be trued up.  The problem with this scenario is not just unexpected licensing expense, but when your SPLA terminates, you must sign a new one.  When you sign a new SPLA, you must adhere to the latest SPUR use rights.  As an example, if you had a SPLA prior to the Windows core licensing change, you could continue to report processors.  If your SPLA terminates, you would be forced to license by core now instead of later when your previous agreement (that is now terminated) expired.
  3. Using a VL copy of Office to deploy Shared Computer Activation (SCA).   SCA is specific to Office 365.  If you install Office Pro Plus VL, it goes against the product use rights in which Office (without SCA) cannot be installed on shared hardware.  It takes a lot of negotiation power and time to prove you are SCA eligible, the customer purchased Office 365, and you inadvertently installed the wrong product.
  4. Using License Mobility without License Mobility.  This is by far the most popular compliance trend.  Many organizations do not know what is installed in their datacenter when it comes to customer owned licenses.  Be sure to have the right documentation, addendum, and licensing to ensure compliance.
  5. Leasing an application, hosting the application, and purchasing volume licensing agreement to offer software as a service.   A healthcare company may lease an EMR application, host the application to other healthcare organizations, and license the infrastructure through volume licensing.  If your organization does not own the application you are hosting, you must license it through SPLA.  Self-Hosted for ISV is only eligible for providers who develop and own the application.  This means the code, the rights, everything must be owned by the organization.  Leasing the application and using other plugins you may have developed does not qualify.

I hope this provides you a little insight into the world of compliance.  If you find yourself out of compliant, let us know and we can connect you to the right resource.  info@splalicensing.com

Thanks for reading,

SPLA Man

 
Leave a comment

Posted by on July 5, 2017 in Compliance

 

Tags: , , , , , , , , , , , , , , ,

Epic Community Connect and SPLA

12 Oct

The healthcare community has increased concerns with the way they have deployed (and licensed) their electronic medical record (EMR) software such as Epic Community Connect and others.  As a reader of this blog, you know that when you deploy software for the benefit of a third party (non employee) SPLA must be part of the conversation.  The only exception to this rule is if you actually own the code to the software you are hosting.  In other words, if you developed the software, you can use your own volume licenses to host your software.  If you host a third party software (such as Epic) you must license this in SPLA.   In most cases, many healthcare companies do not own the application, but lease it from the EMR vendor.

Rewind a few years and let’s pretend you are a large hospital who partnered with Epic to provide best in class patient record management for your clients, doctors, and other clinics. Your Epic deployment resides on a Windows Server, SQL Server, and RDS.  As the IT director, you purchased several server licenses and hundreds of Client Access Licenses (CAL) to cover all the external users.  You think you are covered; no one mentions you need to license this via SPLA.  Your reseller didn’t tell you, Microsoft didn’t tell you, and for that matter the vendor didn’t tell you.  You think all is well based off the information you received.  Fast forward 3 years and your volume licensing agreement is up for renewal.  Someone on the licensing side informs you that you shouldn’t true-up licenses or renew your agreement under volume licensing, you need to license SPLA.  You think that’s fine, if you must license under a different program who are you to argue. But what about all those license you already purchased and own?  Unfortunately, you cannot return them, you must allocate those internally.  You think to yourself that’s fine, except for one minor detail…. you purchased hundreds of CALs and you do not have hundreds of employees; those license you own are essentially worthless.  On top of everything else, you just received an audit notification.

Why would they receive an audit notification?  Once a vendor recognizes you have been under-licensed, the vendor might want to dig in deeper to see how long you have been out of compliant and if you purchased enough licenses to cover all the users.  In 90% of all audits, the customer is under-licensed.  Now you own licenses you don’t need, but should’ve purchased more because you don’t own enough licenses to cover all external users initially.  The vendor will want you to pay the delta of what you should’ve paid under SPLA and what you purchased under volume licensing (plus an audit fee).

If you are a healthcare provider and have been notified by Microsoft or any other vendor, please contact us.  We have found that in many cases the licenses report is not always 100% accurate.

Thanks for reading,

SPLA Man

 
Leave a comment

Posted by on October 12, 2016 in Compliance, EMR Software, Self Hosted

 

Tags: , , , , , , , , , , , , , , , ,

Do you have SA? Why this question really matters.

20 Oct

Brett’s Hosting’s sales director is consistently looking on the web to see what competition is advertising.  It drives him nuts to see other “hoster’s” advertise SharePoint for less than what he can get directly from his reseller.  He’s upset..big time.   How can this be?  Then he stumbles upon the Microsoft Office 365 website.  He blew a gasket.  “There is no way I can compete!  I am going to go out of business!”

So the sales director decided to get creative.  “I will forgo SPLA and just have my customers purchase SharePoint.  They bring it into my datacenter, I won’t report SPLA anymore.”  So that’s what he did.  He started selling SharePoint by the truckload.  Their reseller kept placing orders for him as they’d joyfully ask  “how many CAL’s do you need?” and they would order it; never once asking what it was for.

Brett’s Hosting did a tremendous job marketing their SharePoint offering.  “No SharePoint…No Problem!” It was marvelous.  The CEO of Brett’s Hosting vociferously announced at the World Partner Conference “We are hosting over 10,000 SharePoint sites!”  The celebration continued.  Then one foggy October morning, the office manager for Brett’s Hosting received a letter from Microsoft.  She excitedly opened it thinking they were being promoted as ‘SharePoint Partner of the Year’ but was severely disappointed.  It was an audit letter.  The story turns.

Brett’s Hosting CEO reviewed the letter and then called in their sales director (now sales VP).  The CEO threatened him with his job unless he fixed this mess.  The sales director/VP was at a loss.  “Where did I go wrong.”

To be continued….

Where do you think he went wrong?  Have you ever been given wrong licensing advice?  You don’t need to answer that, I already know.

Hosting industry has changed.  Competition has changed.  End users have changed.  In my experience, the conversation has changed from “how do I license Windows” to “what are ways I can optimize my licensing spend?”  I’ve written about license mobility; I also reviewed SAL for SA.  Those two programs have a common theme – Software Assurance (SA).  In the above fictitious story, the sales person should’ve asked his customer “do you have SA on these licenses”  That question is important because if they do not have SA, the entire environment (hardware/VM) must be dedicated.

I can’t stress this enough.  The hosting game is getting brutal.  Every service provider is looking for a way to cut/reduce costs.  Getting in compliance hot water is not a good way to do that.  If the customer does not have SA, you can certainly use SPLA in its place.  If you go this route, be sure to make it a bundled solution.  Telling customers they must pay for something they already own is not an easy conversation.

The customer can also purchase SA.  You just have to be ready to clearly explain their options. That’s why it’s important to work with a reseller that understand SA benefits to help educate and coach you through the process; not all products are eligible.  Be prepared.

Story continued…

The sales vp went back to his customers and asked them to purchase Software Assurance.  When the customer asked “why?” all the sales vp could say is “because Microsoft told me you needed it.” (he clearly couldn’t explain why…it only made the customer more upset).  The customer simultaneously yelled and slammed the door –  “I’m going to Joe’s Hosting! They advertise VDI too!”

The sales vp went back to his CEO and was forced to resign.  The customer went to Joe’s Hosting and was very happy for over a year. When out of the blue he received a call from his sale rep from Joe’s Hosting.  The sales rep frantically told him they could no longer offer VDI; it apparently is not available under SPLA.  The sales rep also asked him to buy SA for his SharePoint…”Microsoft told me you needed it!” The customer loses again!

Moral of the story – read the SPUR, read the PUR, and don’t be afraid to ask “Do you want SA with that?”

Thanks for reading

SPLA Man

 

 

 
Leave a comment

Posted by on October 20, 2014 in Compliance, Data Center Outsourcing, In My Opinion

 

Tags: , , ,

Top Reporting Errors

26 Sep

Here’s a list of common mistakes service providers make when reporting SPLA.  Don’t say we didn’t warn you!

  1. Reporting only (1) 2 core pack (must report a minimum of 4 cores)
  2. Office without RDS
  3. CRM without SQL
  4. SharePoint without SQL
  5. Reporting SharePoint Enterprise without reporting Standard
  6. Miss combination of Windows and SQL
  7. Agreement without Windows Server
  8. Reporting SQL processors on a recently signed agreement
  9. Using SQL Web to support a line of business application
  10. Reporting less than $100 on a recently signed agreement.

I understand there are many more, but this is a list you can control month end and month out.  More difficult licensing errors to correct include: hosting SPLA on servers that are also consumed internally; installing SPLA software on hardware you don’t control or have access; and using System Center to manage both internal and external facing applications.

Correct it now before it’s too late.

Thanks for reading,

SPLA Man

 
7 Comments

Posted by on September 26, 2014 in Compliance

 

SPLA Audit start to finish

18 Sep

Your business is doing great, your sellers and customers are happy, you are making money instead of spending money, when out of the blue….BAM…you receive an audit letter.  Sound familiar?

So what do you do?  Your first reaction is panic.  Your second reaction is to call a lawyer.  Your third reaction is to blame your reseller.  I think that about sums it up.  If you disagree, I’m not 100% sure you are being truthful with yourself.  If you do agree, I also think you are making a HUGE mistake.  Sounds a little odd doesn’t it?

First thing you need to understand is it’s not your fault.  It’s not as if you are purposely trying to be out of compliant.  Microsoft knows this as well.  SPLA is a difficult program and very hard to understand. As I pointed out in the “About” section of this blog, there is little information written about the SPLA program leaving service providers vulnerable.  The SPUR?  Forget about it. That’s why I created this blog in the first place.

I think that is why SPLA customers call a lawyer to help guide them.  This may help you sleep at night, but is it REALLY helping?  I will let you determine that after the dust settles.

What does happen during an audit? I don’t care if this is the first step or fourth step but at some point you will have to collect data.  Data that PROVES the reason you reported the way you did.  One of the biggest mistakes a SPLA provider can make is not reporting indirect access.  Again, not your fault.  Who has any idea of what “indirect” really means?  Think of indirect as Microsoft software that is used to run your other applications that you market to your customers.  You have an application that you developed that reports back to SQL using Excel.  Users have no idea they are using SQL, all they know is the application they use.  But since SQL is part of your hosted solution…it must be reported.  Make sense?  That’s also why Windows will always need to be reported.  Try running Exchange without a Windows OS.  Not going to happen.

Data can also mean the licenses that your customers own that they bring over to your environment.  How do you know who owns what?  Are there enough CAL’s?  One of the arguments service providers make is they can go after their customers if being audited.  There’s an easy conversation right?  Remember, you want to keep customers not lose them.

Some service providers have learned that their end customers install software on VM’s without informing them.  How do you know what is actually being installed?  So take a look at your datacenter; are your customers installing software you don’t know about?  Collecting this information after the fact is a difficult process.  This leaves auditors with no choice but to make a best guess.  Best guesses can cost you significantly.

So after all this data is analyzed by the audit team, it is then delivered to Microsoft.  That’s when you present your case.  They will take things into consideration, but understand that if you are missing information, it makes your argument that much more difficult.  Don’t blame your reseller, that doesn’t work.  Don’t rely on a lawyer, that doesn’t always work either.  Educate yourself.  That’s the best advice I can provide.  Just by taking the time to read this I think you are on the right path.

Happy to walk you through the process in greater detail.  I am one of the few that actually gets it. My email is at the top righthand side of this page.

Thanks,

SPLA Man

 

 
Leave a comment

Posted by on September 18, 2014 in Compliance

 

Tags: , , , , , , , ,

Hybrid, Dedicated, and Shared Scenarios…

27 Aug

There are three deployment options for service providers – Hybrid (mix of on premise and cloud) Dedicated, and Shared.  In this article, we will break each one down to explain how they work and the options available.

Dedicated Scenario – (3 options available)

Option 1
Your customer decides to bring their own software (such as Exchange) and infrastructure (Windows) via their own volume licensing agreement. They do not have software assurance on the software. Can they do this?

Yes. Why? Everything is dedicated. Server, virtual machine all dedicated to one single organization. Software Assurance is NOT required.

Option 2
Your customer decides to bring the software but the hoster will provide the infrastructure in a dedicated environment. Again, customer does not need Software Assurance if it’s a dedicated environment. In this scenario, the hoster (you) will provide the Windows license via SPLA and not report the other applications the customer brings over since it is already covered via their own volume licensing agreement. This is applicable, it’s dedicated (VM and physical servers)

Option 3
Your customer is a healthcare company that needs a dedicated environment due to regulatory compliance. They do not own any software; they would need the hoster to supply the software licenses. Can they (the hoster) do this? Yes, the hoster would report everything under SPLA. The hoster (you) CANNOT use your own volume licensing agreement to provide the solution but you can certainly provide SPLA. Please be aware that if you own a volume licensing agreement, you cannot use the same hardware your volume licensing agreement resides as your hosted solution.

Also keep in mind that SPLA is non perpetual, when the customer leaves, they can no longer use the software they were accessing.

Summary of Dedicated –
Dedicated is applicable for both SPLA and end customer owned volume licensing. Dedicated also means dedicated hardware and dedicated VM’s. In dedicated environments, the end customer DOES NOT need software assurance. From a compliance perspective, it is defined as the following:

“Any hardware running an instance of Microsoft software (OS or application) must be dedicated to a single customer. For example, a SAN device that is not running any Microsoft software may be shared by more than one customer; since, a server or SAN device that runs Microsoft software may only be used by one customer.” (source: Microsoft VDA FAQ)

Hybrid Scenarios – 3 options available

Option 1
You decide to offer your customer a shared infrastructure but they want the same applications to run on premise. A good option would be to have the customer purchase the server applications (think Exchange, SharePoint, Lync) with software assurance (SA) and run them on premise. You (the service provider) would run the same applications in your shared environment BUT report the SAL for SA SKU. Much cheaper option than standard SPLA prices. I wrote about this here This also works well for Disaster Recovery options.

Option 2 (not really a hybrid but just go with it)
You can use license mobility. Microsoft likes to define this as a “hybrid option” but to me, hybrid insinuates the ability to run on premise and in your cloud. License mobility is a SA benefit for certain applications (SQL, CRM, SharePoint, Exchange, Lync) that allows customers to leverage their investment in SA and transfer those licenses into a hosters shared infrastructure. Reason why I don’t think this is truly a hybrid is the customer is TRANSFERRING licenses into your datacenter. This means that if a customer wants to move back to their own datacenter, they have to wait 90 days. (transfer license rule). With SAL for SA, nothing is being transferred. Windows does not have mobility rights, this will need to be reported under your own SPLA. I wrote about license mobility many times – here’s an article for your review – here You can also check out the Microsoft site for more of a definitive definition http://www.microsoft.com/licensing/software-assurance/license-mobility.aspx

Option 3
Good Ole’ SPLA. Customer can run their own servers on premise, you just report SPLA licensing in your shared environment. The new SPLA agreement even allows you to run SPLA software on customer owned hardware as long as you still manage it.

Shared Scenarios – 2 options

Option 1
License Mobility – see above

Option 2
SPLA. We all know what that is.

Summary

I hope this brings a bit more clarity. Sorry if some things are redundant but at the same time, some things are simply worth repeating. Here’s the takeaway – customer’s can always bring licenses into your datacenter. There is no law of the land that prohibits this. What is prohibited is the way you deploy the technology. There is only one option to install customer owned licenses in a shared environment and that is license mobility. Again, (here I go being repetitive) if Microsoft allowed customer owned licenses to be installed in shared environments than why would they create license mobility?

If you still have trouble comprehending all this, shoot me an email located at the top right of this page. One general rule of thumb – if it’s shared – 90% of the time SPLA is required.

Thanks for reading

SPLA Man

 
15 Comments

Posted by on August 27, 2014 in Compliance, License Mobility

 

Tags: , , , , , , , ,

Help me SAM!

11 Aug

I was on a call the other day and the customer was pleasantly surprised to learn about the SPLA program. Although I do not manage the program in its entirety like the old days, I will say this was a refreshing surprise. When you mention SPLA to a customer, account manager, or even Microsoft, more times than not you here a groan. ABS – Anything But SPLA! I am sure if there are resellers reading this, they would probably agree. Why no love for a program that is growing exponentially year/year? What are better alternatives…buy the licenses outright?

I don’t think the issue is with the program itself; after all, the ability to get started with zero upfront costs from a licensing perspective is pretty cool! I don’t even think the licensing is all that difficult once you get started. The pain point is understanding all the “gotcha’s” and the “in’s” as well as all the “outs” to make sure what you are doing is both compliant and cost-effective.  SPLA is an honor based system, but if you are found dishonest, it will cost you.

One of the biggest hurdles is tracking licenses. With the release of Azure, license mobility, and regular SPLA licenses, the ability to track licenses is becoming more complex.  End customers do not want to double pay for licenses already purchased and service providers don’t want to report SPLA if they don’t have to.  So what do you do?

That’s where my old friend named Sammy comes in. On premise customers have used SAM (Software Asset Management) for years as a mechanism to track licenses purchased and/or deployed.  This is not a one time snapshot, (although I guess it could be if you want it to be) but an ongoing strategy to make sure licenses are being consumed properly.  If they are not, at least they catch the problem before they get audited.

Service providers are different; very few have a SAM strategy.  Most service providers are taking part in license mobility and customer owned licenses more regularly. If you don’t believe me check out all the license mobility partners on Microsoft’s website.  If you thought SPLA is complex, try combining on premise licensing and SPLA and see what you have!

What does SAM really do? It’s a strategy. It will give you tools and a team of experts to help guide you through the ever-changing license use rights (SPUR or PUR for those playing at home).  In most cases, it provides you with the necessary resources to help protect you from vendor audits.  There are different levels of SAM to cater towards different types of environments.  Just like service providers, no two environments are the same.

Here’s my advice (if you are wondering) – if you are a service provider, get a SAM strategy in place.  There’s a saying I read somewhere ( I believe LinkedIn) that said if you think audit prevention is expensive, try being audited.  (paraphrased here but you get my point).

If you don’t have a SAM resource, email me, (blaforge@splalicensing.com) I can be your SPLA/SAM resource.  I guarantee I know the program better than most.  You can also check out our SAM services at SoftwareONE here

As always,  hope you find this helpful and gives you some ideas.

Thanks for reading,

SPLA Man

 
Leave a comment

Posted by on August 11, 2014 in Compliance

 

Tags: , , , , , ,

← Older posts
 
%d bloggers like this: