Run Tally on Cloud Securely with TSplus Step by Step
Your Tally stays on one cloud server. Your staff open only the Tally app in a browser — nothing is installed on their machines and no accounts data sits on any laptop. Here is the full setup, with the security layer done honestly.
✍️ Technical Anshu☁️ Windows Server🔐 Guarded Setup
🎥 Full video — the complete Tally on cloud deployment with TSplus, step by step
The video builds this exactly: a Windows server (the demo uses Windows Server 2025 Data Center), TSplus installed on it, Tally installed on the same server, one user account per person, and the Tally app published through the TSplus Admin Tool — so staff reach Tally through a web browser or a small generated client, from office, home or another city. This page follows that route and adds the part that decides whether the setup is actually safe: the door, the passwords and the backups.
The Guarded Shape — What Safe Looks Like
Raw RDP port 3389 open to the whole internetDangerous
TSplus web portal on HTTPS, Tally app onlyGuarded
One personal login per staff memberGuarded
2FA switched on for the web portalStrong
Backup stored only on the same serverWeak
The setup in one picture: publish the app, not the desktop — and guard the one door everyone walks through.
1
What This Setup Actually Is
In the classic office setup, Tally lives on one PC and everyone else connects over the LAN. The cloud version simply moves that one PC to a server that is always on and reachable, and TSplus replaces the LAN: it takes the Tally application on the server and publishes it, so a user logs in through a browser page and sees Tally — not the server desktop.
Two honest consequences follow. First, users need no Tally installation of their own, which is the big win over the VPN route described in the video — a VPN joins networks, but each user still needs Tally on their own machine. Second, everything now depends on one door: the TSplus login page. The rest of this guide is about guarding that door properly.
2
Step 1 — Prepare the Windows Server
Rent or arrange a Windows server with enough RAM for your user count — Tally plus one session per user all live on this one machine
Run Windows Update fully before installing anything; an internet-facing server starts patched, not pending
Set a strong administrator password — 12 characters or more, mixed cases, numbers and a symbol, and not one you use anywhere else
Decide the server address your team will bookmark; a proper name with HTTPS comes in Step 5
3
Step 2 — Install TSplus and Tally
Download TSplus Remote Access from the official TSplus website only — never from a file-sharing mirror
Install TSplus on the server and reboot when it asks
Install Java and then Tally (ERP 9 or TallyPrime) on the server, exactly as shown in the video
Activate your Tally licence on this server — the licence now lives here, not on the old office PC
The video runs the TSplus trial licence — 5 users for 15 days. That is fine for testing the full flow with your real team before you pay for anything.
4
Step 3 — Create One User Per Person
This is the step people rush, and it is the one that protects you later. In the TSplus flow you create a separate Windows user on the server for every staff member, each with their own strong password.
Never create one shared login like tallyuser for the whole office — a shared login destroys the audit trail, and when one person leaves, you cannot lock them out without locking everyone out
Keep the server administrator account for administration only; nobody does daily entries with it
Inside Tally, create matching Tally users with security levels — data entry staff get entry rights, not alter-and-delete rights
5
Step 4 — Publish Only the Tally App
In the TSplus Admin Tool, publish Tally as an application and assign it to your users, as the video demonstrates. Do not publish the full server desktop for regular staff.
This matters more than it looks: a user who can only open Tally cannot wander through the server, open the data folder in Explorer, or install anything. Publishing one app shrinks what a stolen password can reach — it gets the attacker an accounting app login screen, not your whole server.
6
Step 5 — Put the Door on HTTPS and Keep RDP Closed
The TSplus web portal is the door the whole internet can knock on, so it gets the real lock:
In the TSplus Admin Tool, configure the web server for HTTPS with an SSL certificate and force HTTPS, allowing only TLS 1.2 and TLS 1.3 — this is TSplus's own published hardening advice
In your cloud firewall, open only the TSplus web port (HTTPS). The Windows RDP port 3389 must not be open to the internet — administrators reach the server another way, never through a public RDP door
Change any default or trial settings you were given, and keep TSplus updated like you keep Windows updated
7
Step 6 — Add the Second Layer Before You Invite the Team
Two-factor authentication: TSplus offers 2FA in its bundles and as a stand-alone add-on — a password alone should not open your accounts
Brute-force protection: the companion product TSplus Advanced Security adds a Brute Force Defender, IP filtering and country restrictions — worth it on any internet-facing portal
Backups that leave the box: schedule Tally backups to somewhere that is not this server — a copy on the same machine dies with the machine
Then, and only then, hand out the logins
🔴 About the words "without security risks": no system connected to the internet has zero risk — anyone who promises that is selling, not engineering. This guarded shape removes the biggest risks (open RDP, Tally copies on every laptop, data folders passed around) and manages the rest with HTTPS, 2FA, updates and off-server backups. Risk reduced a lot — never zero. Anyone who runs it still has to do the monthly audit linked from this series.
🎥 Watch the Full Deployment in the Video
Every installation screen — server, TSplus, Java, Tally, user creation and publishing the app — is shown live in the video above.
No internet-facing system is completely safe, and you should distrust anyone who says otherwise. The guarded shape — app-only publishing, HTTPS, 2FA, brute-force protection, updates and off-server backups — removes the common ways such servers get broken into. The remaining risk is managed, not eliminated, which is why a monthly security audit matters.
Do my staff need Tally installed on their own computers?
No. That is the main advantage of this route over a plain VPN. Tally runs only on the server; staff open it through a browser or the small TSplus client and work as if it were local. Their machines hold no Tally data at all.
Is TSplus free?
TSplus offers a trial — the video uses the trial licence with 5 users for 15 days, which is enough to test the complete setup. After the trial it is a paid product, licensed per server. Budget for it honestly: the server rent, the TSplus licence and your Tally licence are three separate costs.
This guide is based on the Technical Anshu video above • Product plans and security settings change over time, so confirm current details on the official TSplus and Tally Solutions pages before you change a live server 🙏