Windows operating systems that are no longer supported by the vendor for security updates must not be installed on a system.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-4107	WIN00-000001	SV-70683r1_rule	DCSQ-1	Medium

Description
Windows operating systems that are no longer supported by Microsoft for security updates are not evaluated or updated for vulnerabilities leaving them open to potential attack. Prior to the end of support, organizations must plan for the transition to a supported operating system to ensure continued support and availability.

STIG	Date
Windows 2003 Domain Controller Security Technical Implementation Guide	2014-12-13

Details

Check Text ( None )
None

Fix Text (F-61309r1_fix)
Six months prior to the end of support, develop a migration plan to move systems to a supported operating system. Upgrade systems to a supported operating system prior to the end of support on 14 July 2015.