DMS Systems, Data, Security, I.T.

Reynolds & Reynolds implemented new security features in their ERA Report Generator system that require users to save reports before running them and complete bot-verification challenges, ostensibly to prevent unauthorized automated data downloads. However, industry professionals believe this is a deliberate business strategy to force dealers and vendors to pay for Reynolds' licensed unattended download service (RCI) rather than use existing Query Builder tools, resulting in widespread frustration among vendors and prompting some major dealer groups to defect to competing DMS providers.

Reynolds has implemented a 1,000-line data limit on its ERA Report Generator to block third-party screen scraping of the 6910 report, but dealers and vendors are skeptical of the stated security rationale, suspecting it's actually a move to eliminate competitor access and force dealers toward Reynolds' own RCI service and newly acquired marketing division. The thread reveals frustration that this restriction applies even to legitimate VPN access methods and represents Reynolds attempting to monetize dealer data while claiming to protect it. Key insight: participants view this as anticompetitive behavior that will ultimately increase costs for dealers rather than improve security.

A user asks how to enable "vehicle sales" and "service history" in ADP Alliance Web Suite 1000's extract menu, and after troubleshooting discovers this requires ADP support intervention rather than dealer-side configuration. The thread provides a detailed step-by-step process: dealers must complete an Extract Sheet, call ADP Alliance support to obtain a case number, and submit the form for approval—a lengthy process that can be expedited by phone calls emphasizing deadlines. A workaround is mentioned using command-line report generation, though its applicability to web-based systems is questioned.

A DMS user sought advice on extracting F&I payment and term data from Reynolds or ADP systems for a direct mail campaign. The thread provides practical solutions: for Reynolds & Reynolds, use the FIMAST filename with clearly labeled fields (TERM, PAYMENT); for ADP, users recommend running reports through the FI-WIP report or using the RPG report generator to identify the correct data fields and generate English statements. The key insight is that while R&R documentation is accessible, ADP requires more trial-and-error since technical support offers limited guidance.

A vendor partner asks how to help their dealership customers unlock user profiles in Reynolds & Reynolds' ERALink system when accounts become locked due to incorrect passwords or inactivity. A community member provides the specific solution: navigate to screen 6210, enter the locked username, type "C" to change the account status, and "S" to save the changes. This resolved the original poster's issue and provided a clear procedure they can now share with dealership clients.

Dealership professionals discuss Cisco AnyConnect VPN software that Reynolds and Reynolds offers to third-party vendors for secure remote access to dealership systems. While AnyConnect is confirmed as a legitimate and secure VPN solution that works across operating systems, one respondent raises a significant security concern: reverse shell connections (used by some third-party vendors like Ryan Tech and Integralink) pose risks compared to controlled data delivery methods, as they give external parties direct access to the dealership's network where the DMS resides.

A dealer's forms administrator seeks guidance on creating and editing F&I forms in ADP, noting that laser forms are particularly difficult to manage and that ADP support lacks expertise in this area. A respondent shares that Reynolds (a competitor DMS) has a dedicated forms editing screen, but access is heavily restricted and appears to be a legacy feature no longer readily available. The thread highlights a frustration with DMS vendors' limited support for customizable forms management, with no clear solutions offered.

A user asks how to change the port settings in ADP XR8.02's Reflection Client, and another user explains that there's no built-in option within the client itself, but suggests using telnet through the Windows command line as a workaround. The key insight is that while the Reflection Client doesn't support port configuration directly, telnet can be used as an alternative—though success depends on whether the ADP server is configured to accept telnet requests on non-default ports.

Dealers and vendors are frustrated with Reynolds DMS implementing CAPTCHA-style security questions to restrict third-party access to dealer data, which they view as ineffective security theater that complicates integrations without meaningfully preventing unauthorized access. While Reynolds frames this as a "security update" following an apparent incident with Higher Gear, participants argue that dealer-controlled credential sharing is already secure enough, and that ADP's Open Secure Access approach offers a better model. The consensus is that Reynolds' approach is annoying and workable for now, but creates unnecessary friction without proven security benefits.

Jarrett inquires whether Arkona experienced a major server crash affecting multiple dealers, specifically asking if a hosted server failure resulted in 60 days of downtime due to failed redundancy systems and improper failover to backup data centers. While mattwatson81 argues that cloud hosting is generally more reliable than on-site servers, Jarrett's unconfirmed rumor suggests Arkona's infrastructure may not have kept pace with their sales growth, leaving the core question of whether this incident actually occurred unresolved by thread participants.

A DealerRefresh user inquires about an ADP acquisition of an Oklahoma company, potentially within the Dealer Services division, occurring within the previous couple of years, but receives no substantive answer. Another user acknowledges lacking specific knowledge of the acquisition and suggests redirecting to discuss the underlying business need. The thread appears incomplete with no resolution or identification of the acquired company.