Windows 10 systems must be maintained at a supported servicing level.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-63349	WN10-00-000040	SV-77839r7_rule		High

Description
Windows 10 is maintained by Microsoft at servicing levels for specific periods of time to support Windows as a Service. Systems at unsupported servicing levels or releases will not receive security updates for new vulnerabilities which leaves them subject to exploitation. New versions with feature updates are planned to be released on a semi-annual basis with an estimated support timeframe of 18 to 30 months depending on the release. Support for previously released versions has been extended for Enterprise editions. A separate servicing branch intended for special purpose systems is the Long-Term Servicing Channel (LTSC, formerly Branch - LTSB) which will receive security updates for 10 years but excludes feature updates.

Description

Windows 10 is maintained by Microsoft at servicing levels for specific periods of time to support Windows as a Service. Systems at unsupported servicing levels or releases will not receive security updates for new vulnerabilities which leaves them subject to exploitation. New versions with feature updates are planned to be released on a semi-annual basis with an estimated support timeframe of 18 to 30 months depending on the release. Support for previously released versions has been extended for Enterprise editions. A separate servicing branch intended for special purpose systems is the Long-Term Servicing Channel (LTSC, formerly Branch - LTSB) which will receive security updates for 10 years but excludes feature updates.

STIG	Date
Windows 10 Security Technical Implementation Guide	2019-01-04

Details

Check Text ( C-82145r4_chk )
Run "winver.exe". If the "About Windows" dialog box does not display: "Microsoft Windows Version 1607 (OS Build 14393.0)" or greater, this is a finding. Note: Microsoft has extended support for previous versions providing critical and important updates for Windows 10 Enterprise. Currently supported Semi-Annual Channel versions: v1607 - Microsoft support is scheduled to end 09 April 2019. v1703 - Microsoft support is scheduled to end 08 October 2019. v1709 - Microsoft support is scheduled to end 14 April 2020. v1803 - Microsoft support is scheduled to end 10 November 2020. v1809 - Microsoft support is scheduled to end 13 April 2021. No preview versions will be used in a production environment. Special purpose systems using the Long-Term Servicing Branch\Channel (LTSC\B) may be at the following versions, which are not a finding: v1507 (Build 10240) v1607 (Build 14393) v1809 (Build 17763)

Check Text ( C-82145r4_chk )

Run "winver.exe".

If the "About Windows" dialog box does not display:

"Microsoft Windows Version 1607 (OS Build 14393.0)"

or greater, this is a finding.

Note: Microsoft has extended support for previous versions providing critical and important updates for Windows 10 Enterprise.

Currently supported Semi-Annual Channel versions:
v1607 - Microsoft support is scheduled to end 09 April 2019.
v1703 - Microsoft support is scheduled to end 08 October 2019.
v1709 - Microsoft support is scheduled to end 14 April 2020.
v1803 - Microsoft support is scheduled to end 10 November 2020.
v1809 - Microsoft support is scheduled to end 13 April 2021.

No preview versions will be used in a production environment.

Special purpose systems using the Long-Term Servicing Branch\Channel (LTSC\B) may be at the following versions, which are not a finding:

v1507 (Build 10240)
v1607 (Build 14393)
v1809 (Build 17763)

Fix Text (F-89199r2_fix)
Update systems on the Semi-Annual Channel to "Microsoft Windows Version 1607 (OS Build 14393.0)" or greater. It is recommended systems be upgraded to the most recently released version. Special purpose systems using the Long-Term Servicing Branch\Channel (LTSC\B) may be at the following versions: v1507 (Build 10240) v1607 (Build 14393) v1809 (Build 17763)