Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-4107 | WIN00-000001 | SV-70683r1_rule | DCSQ-1 | Medium |
Description |
---|
Windows operating systems that are no longer supported by Microsoft for security updates are not evaluated or updated for vulnerabilities leaving them open to potential attack. Prior to the end of support, organizations must plan for the transition to a supported operating system to ensure continued support and availability. |
STIG | Date |
---|---|
Windows 2003 Domain Controller Security Technical Implementation Guide | 2015-03-09 |
Check Text ( C-56983r1_chk ) |
---|
Support for Windows 2003 ends 14 July 2015. Six months prior to the end of support, organizations must have a migration plan to move systems to a supported operating system. Effective January 2015, if a plan is not in place to migrate to a supported operating system prior to the end of support for Windows 2003, this is a finding. Effective 14 July 2015, using Windows 2003 is a Cat I finding. |
Fix Text (F-61309r1_fix) |
---|
Six months prior to the end of support, develop a migration plan to move systems to a supported operating system. Upgrade systems to a supported operating system prior to the end of support on 14 July 2015. |