Ask HN: My manager is asking me to violate MS licensing. What should I do?
I had to research licensing in depth when putting together a proposal to replace all the servers. It turns out that we should have External Connector licenses, as well as about 35 CALs for internal users. We can no longer claim ignorance on this issue.
The company has decided to move fully to AWS in the next year, so the requirement has changed to keeping the colo going for 6 to 9 months. I supplied estimates to management of the cost of getting the licensing in order - around £7k. My manager has strongly suggested that his preference would be just to forget about it since it's only a few months and we've got away with is so far.
The management seem to think that MS can only request voluntary audits and that the worst case risk is that we'll be forced to buy what's required to become compliant.
My question is how I should respond to this, and what the law says. Bear in mind we're in the UK and the law may be different here compared the US.
(1) Is MS entitled to forcibly audit us? (2) If we violate the licensing, what is the worst case? Can they enforce fines on the company? (3) Is this a criminal matter, or a contractual/civil matter? (4) What is the personal liability of individuals here? Are IT/Sysadmin people able to be held personally liable in law?
We actually received a voluntary Microsoft audit some time back (maybe 18 months ago), when we had a different IT manager and a dedicated sysadmin. The sysadmin did the audit work, but then he was made redundant. MS came back with a load of queries, but our IT manager at the time just ignored it until it went away. My concern is that this might flag us up for a more aggressive audit at some point.