Windows operating systems that are no longer supported by the vendor for security updates must not be installed on a system.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-4107	WIN00-000001	SV-70683r1_rule	DCSQ-1	Medium

Description
Windows operating systems that are no longer supported by Microsoft for security updates are not evaluated or updated for vulnerabilities leaving them open to potential attack. Prior to the end of support, organizations must plan for the transition to a supported operating system to ensure continued support and availability.

STIG	Date
Windows 2003 Member Server Security Technical Implementation Guide	2015-03-09

Details

Check Text ( C-56983r1_chk )
Support for Windows 2003 ends 14 July 2015. Six months prior to the end of support, organizations must have a migration plan to move systems to a supported operating system. Effective January 2015, if a plan is not in place to migrate to a supported operating system prior to the end of support for Windows 2003, this is a finding. Effective 14 July 2015, using Windows 2003 is a Cat I finding.

Fix Text (F-61309r1_fix)
Six months prior to the end of support, develop a migration plan to move systems to a supported operating system. Upgrade systems to a supported operating system prior to the end of support on 14 July 2015.