Modern Identity, Azure Virtual Desktop, and Tax-Season-Ready IT Built for an 8-Person Inland Empire CPA Firm
How Legacy Accounting Tax replaced an aging on-premise server, deployed Microsoft 365 Business Premium with location-based Conditional Access, and stood up Azure Virtual Desktop — so staff can work tax season from anywhere without losing the MSSQL accounting platform they rely on.
Managed by Soaring Towers
Hear it from Lynn Gutierrez at Legacy Accounting Tax
Coming soon...
An 8-person Inland Empire CPA firm preparing taxes, doing the books, and protecting client financial data — year-round.
Legacy Accounting Tax is a CPA and tax-preparation firm based in Rancho Cucamonga, California, serving individuals and small-to-medium businesses across the Inland Empire and Southern California. The firm operates from a single office on Laurel Street under the industry-appropriate legacyaccounting.tax domain, with a tight 8-person team handling tax preparation, bookkeeping, and accounting services for a steady book of business and personal clients.
Accounting practices handle Social Security numbers, financial statements, and tax filings every day — a high-value, high-compliance environment that demands above-average security and uptime. As Legacy Accounting Tax grew, the firm came to Soaring Towers for managed IT that could deliver enterprise-grade identity security, Azure cloud infrastructure that preserved the MSSQL accounting platform, and the kind of tax-season resilience an 8-person team can't build alone.
An 8-person CPA firm running tax season on a 7-year-old out-of-warranty server, consumer workstations, and zero identity monitoring.
MBSServer — a Dell PowerEdge T330 hosting the firm's MSSQL accounting database — was on Windows Server 2016 Essentials with a Dell warranty that expired in January 2020. Workstations were out-of-warranty Dell Vostros. No MFA enforcement. No Conditional Access. No domain monitoring. The same pattern we see across small CPA firms that grew faster than their IT did.
-
Aging on-premise server hosting the firm's MSSQL accounting databaseA Dell PowerEdge T330 running Windows Server 2016 Essentials, Dell warranty expired January 2020, and MSSQL — the database the entire practice depends on — running on hardware 3+ years out of vendor support at the time of engagement.
-
Out-of-warranty consumer workstations with no remote patchingMultiple Dell Vostro 3888 desktops with warranties expired October 2022 running Windows 11 — updates applied by hand visit-by-visit, no remote endpoint management, no fleet patching cadence.
-
No cloud identity layer or sign-in monitoringNo MFA enforcement, no Conditional Access, no location-based sign-in monitoring — and an accounting firm holding client SSNs and tax data is one of the highest-value targets in the SMB attack surface.
-
No domain lifecycle monitoring or cloud backup postureBackup was two local Synology NAS units with no monitored cloud destination, and the firm's domain registrar payment method had expired — putting the legacyaccounting.tax domain at risk of dropping during tax season, when email outage equals lost revenue.
Microsoft 365 Business Premium, a governed Azure cloud, and identity security usually reserved for enterprise banks.
Soaring Towers designed and is operating an end-to-end managed environment for Legacy Accounting Tax — a 6-Premium + 2-Standard Microsoft 365 tenant, an Azure Virtual Desktop deployment that preserves the MSSQL accounting platform, Entra ID Conditional Access with location-based sign-in policies, and lifecycle monitoring on the domain that kept email available through every tax season since.
Today's accounting and tax firms need IT that protects client data, survives tax season, and looks like enterprise from the outside.
An 8-person CPA firm processing tax returns, financial records, and client SSNs — accessed by staff working extended hours during the January-to-April crunch — can't operate on aging hardware and unmonitored cloud accounts. The threat model is real: accounting firms are high-value targets, and a single compromised mailbox or expired domain can pull email offline during the worst possible week of the year.
At Soaring Towers, we specialize in managed IT for accounting and professional-services firms — bringing the enterprise-grade identity, cloud infrastructure, and proactive monitoring of a much larger operation, sized for a sub-10-person practice.
Four foundations of a modern accounting-firm IT environment.
Every layer below was selected and configured specifically for the realities of an 8-person CPA practice — secure access to financial data, an MSSQL accounting platform that staff can't migrate away from, and a January-to-April crunch that no piece of infrastructure is allowed to fail during.
Microsoft 365 Business Premium + Standard
Six Microsoft 365 Business Premium seats — Exchange Online, Teams, SharePoint, OneDrive, Defender for Business, Intune, and Entra ID P1 — plus two Business Standard seats, with license tiers right-sized seat-by-seat and phased in over 15 months rather than sold all at once.
- 6 Business Premium + 2 Standard seats
- Microsoft Defender for Business EDR
- Intune-managed endpoints
Microsoft Azure + Azure Virtual Desktop
Microsoft Azure Plan since July 2024, an Azure Virtual Desktop session host (LegacyPCAVD-3, Windows 11 Enterprise multi-session) for staff access, and a Windows Server 2025 Azure-hosted database VM — preserving the MSSQL accounting workload while moving the compute to the cloud.
- Azure Virtual Desktop session host
- Windows Server 2025 Azure database VM
- MSSQL accounting workload preserved
Entra ID + Conditional Access with location policies
Cloud-only Entra ID (no AD Connect, no on-premise domain sync to manage) with Conditional Access policies that flag and block unusual sign-ins by location — the same identity architecture enterprise financial-services firms deploy, configured for a sub-10-person practice.
- Cloud-only Entra ID (no AD Connect)
- Location-based Conditional Access
- Mailbox-rule audits on sign-in alerts
CWRMM + CIPP + domain monitoring
CWRMM for remote endpoint patching (Windows + Dell BIOS updates), CIPP-driven user onboarding and offboarding against the M365 tenant, and proactive domain registrar lifecycle monitoring — including PwPusher-encrypted credential handoffs for sensitive operations.
- CWRMM remote patch management
- CIPP user lifecycle workflows
- Domain registrar lifecycle monitoring
Ready to put enterprise IT behind your firm?
If your accounting practice is wrestling with aging on-prem servers, unmonitored Microsoft 365 identity, no Conditional Access, or tax-season uptime risk — we can help.
Get practical guidance for evaluating your firm's identity security, cloud infrastructure, and continuity posture. No commitment, no sales pressure.
Measurable outcomes for Legacy Accounting Tax.
An 8-person CPA practice with a modernized Microsoft 365 tenant, Azure Virtual Desktop running the MSSQL accounting workload, and Conditional Access catching suspicious sign-ins before they reach client data. Quiet, structured operations — not the firefighting that often comes with break/fix IT.
An 8-person CPA firm running on enterprise-grade identity and cloud infrastructure.
After partnering with Soaring Towers, Legacy Accounting Tax operates on the IT footprint of a much larger practice — Microsoft 365 Business Premium, Azure Virtual Desktop, location-based Conditional Access, and proactive domain and identity monitoring — all sized for a sub-10-person team, ready for every tax season.
-
Microsoft 365 Business Premium tenant deployedSix Business Premium + two Standard seats with Exchange Online, Teams, SharePoint, OneDrive, Defender for Business, Intune, and Entra ID P1 — phased in over 15 months rather than sold at maximum tier on day one.
-
Azure Virtual Desktop running the MSSQL accounting workloadStaff access the firm's line-of-business accounting software through Azure Virtual Desktop — modern remote-work experience without forcing a migration off the MSSQL platform, with the database hosted on a Windows Server 2025 Azure VM.
-
Cloud-only Entra ID with Conditional Access live in productionLocation-based sign-in policies catching anomalous logins as they happen — 6+ alerts investigated under documented security protocol (sign-in log review and mailbox-rule audits), zero confirmed breaches.
-
Domain registrar near-miss caught before lapseExpiring registrar payment method flagged by proactive lifecycle monitoring — Soaring Towers coordinated with Lynn Gutierrez via PwPusher-encrypted credential handoff to restore auto-renewal, preventing a potential tax-season email outage.
-
Structured user-lifecycle workflow via CIPPDocumented onboarding and offboarding sequence — disable account, delete from tenant, remove from address list, revoke shared mailbox access — executed cleanly against the cloud-only tenant and fully auditable end-to-end.
Coming soon...
The Accounting Firm IT & Cybersecurity Checklist
Before making your next technology decision, evaluate whether your firm's identity, cloud, endpoint, and continuity posture can survive a tax-season incident. Our free checklist surfaces:
- Aging on-prem server risks
- Identity & sign-in monitoring gaps
- Microsoft 365 license & tier fit
- Endpoint patching & warranty exposure
- Domain & cloud backup posture
- Tax-season continuity readiness
- 40+ accounting-firm IT checkpoints
- Identity & Conditional Access best practices
- M365 license sizing for CPA practices
- Azure Virtual Desktop for line-of-business apps
- Domain lifecycle & continuity guidance
- Tax-season-ready continuity planning
A partner that protects your clients' data and your tax season.
Accounting and tax firms need more than reactive helpdesk. Our business-first approach combines enterprise identity security, Azure cloud infrastructure, proactive monitoring, and right-sized Microsoft 365 — sized for a sub-10-person team and ready for every January-to-April crunch.
Answers for accounting and tax-firm leaders.
Don't see your question? Reach out for a discovery call.
It includes Microsoft 365 with Business Premium for sensitive-data users (Exchange, Defender for Business, Intune, Entra ID P1), Conditional Access with location-based sign-in monitoring, Azure cloud infrastructure that preserves the accounting platform (often MSSQL-backed), CWRMM remote patching, CIPP-driven user lifecycle, proactive domain lifecycle monitoring, and a structured security escalation protocol for sign-in incidents.
CPA firms hold client SSNs, financial statements, and tax filings — extremely high-value data for attackers. A single compromised mailbox can expose dozens of clients and trigger a real breach-notification event. Entra ID Conditional Access with location-based sign-in policies catches anomalous logins before they reach mailbox data, and a structured response protocol (sign-in log review and mailbox-rule audits) closes the loop on every alert.
Yes. We deploy Azure Virtual Desktop and Azure-hosted database VMs so staff access the same line-of-business accounting platform (often MSSQL-backed) remotely — modern compute and identity layer wrapped around the software your team already knows. Vendor migration is not required, which avoids retraining, data-conversion risk, and tax-season disruption.
Real experience deploying Entra ID Conditional Access and Microsoft 365 Business Premium for sensitive-data firms, comfort operating Azure Virtual Desktop with line-of-business applications like MSSQL accounting platforms, willingness to phase license tiers up over time instead of overselling at onboarding, proactive lifecycle monitoring (domain, license, identity), a documented security escalation protocol, and a strategic review cadence that helps you plan IT decisions ahead of every tax season — not just respond to tickets.
The stack we deployed for Legacy Accounting Tax.
