Quickbooks support will not help you fix this. In fact, several years ago, they made it worse for us. I've had this issue for years, and yes it is a sever security concern. We have had all kinds of issues every year at this time, and here we go again with more, including this one (QB problems cost us hundreds of hours every year. It's so common for years now that the time expense talking to QB support and working though our many problems every year is a line item in our financial reports). This particular issue we resolved by keeping the QB machines in each their own DMZ with limited internet access, keeping an image of the system drives in case they get compromised and made the users administrators. Now these computers don't connect to the internal Corp network. They only work on files from flash drives, one at a time and the users sneaker-net them back to their internal Corp machine and copy them back to the server when done. This saves me about 100 hours each year fighting with QA Support agents who have no clue what they are doing (that's $20,000 for "Quickbook Support Costs"). The extra time the bookkeeper spends is actually negligible, about 15 minutes per file, and that gets billed. The QB customer assistance team made this issue worse a few years ago, which is why we now have our workstations in their own isolated DMZs, problem solved! So again, the solution to this issue is to 1- buy a cheap used office computer ($300). 2- Install all your QBs on it. 3- Create a DMZ on your network for each computer sitting off the edge of your gateway. 4- Make a disk image in case the computer get compromised. 5- Make the users administrators on those machines. 5- When they need to work on QB 20-21-22-23-24 Desktop files, they copy the file (folder) from the server to their main local workstation on the Corp network, mark the client folder as "Checked out" on the server, copy the folder onto a flash drive, swivel their chair, plug it into the DMZ machine and when done scan the flash drive for issues, swivel back, copy the folder back to their workstation (which gets scanned again), upload to the server and mark the folder "Checked in". Problem solved, saves time and money, and the aggravation of working with the QB support team which usually makes matters worse.