Organization of the work of bank clients, taxcoms and other various accounting software?

Question

System administration

In the accounting department of each company, different bank clients, electronic document management programs such as taxcom, some programs for working with tax, pension fund, etc. are used. The quality of writing such programs sometimes leaves much to be desired, for example, the requirement of admin rights from an ordinary user. And when the accountant quits, you have to set up these banks on a different account, or even worse if the computer breaks down.
Therefore, I wondered how to untie this software from the computer and account. I see the following ways to solve this problem:
1. terminal server
2. virtual machine (virtualbox on the accountant's computer)
The possibility of problems with forwarding usb tokens to the virtual machine / terminal immediately comes to mind.
I did not find any information in Google and on Habré, or maybe I was looking for it incorrectly. That's why I'm asking here.
Has anyone used similar schemes? What problems did you encounter and how did you solve it?
Or maybe someone came up with another way instead of those suggested by me?

Answer 1

Why set up on a different account? Changed the password and let the new person work on. If the computer breaks down, then the system is restored from the backup and works on.
A cheap option is a separate computer with XP / 7/8/10 with keys and programs. Access to it through rdp. Only one person connects, no terminal servers are needed.

Answer 2

And when the accountant quits, you have to set up these banks on a different account,

What for? Ivanova Martya Ivanovna retired - Petrova Tatyana Petrovna came. We renamed the account in AD from Ivanova to Petrova, you can not even change the password, and work continues.

Answer 3

no, a cheap and stable option, this is not a separate computer, but just one "almost sleeping" virtual machine on the same Hyper-V - I have implemented the guarantee of the "indestructibility" of the responsible machine in several "self-service" offices, because other computers are very often subject to self-reinstallation .. and a virtual machine with reporting is available via RDP and is used no more than once a month .. similarly with bank clients with a local transaction statement bazulka ..