Systems must be at supported service packs (SP) or releases levels.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-1073	2.005	SV-29338r2_rule		High

Description
Systems at unsupported service packs or releases will not receive security updates for new vulnerabilities and leaves them subject to exploitation. Systems must be maintained at a service pack level supported by the vendor with new security updates.

STIG	Date
Windows 2008 Domain Controller Security Technical Implementation Guide	2019-06-18

Details

Check Text ( C-94141r1_chk )
From the menu bar click “Start” and then “Run”. Type “winver.exe” in the dialog box and click OK. If the "About Windows" box displays the following Service Pack(s), then this is a finding. Unsupported Service Packs: Windows 2008 – any prior to SP2 Support of SP1 for Windows 2008 ended 12 July 2011. NOTE: Microsoft support for Windows Server 2008 will end January 14, 2020. At which time, use of Windows Server 2008 will result in a CAT I. Sites must migrate to a supported operating system prior to the end of support date.

Check Text ( C-94141r1_chk )

From the menu bar click “Start” and then “Run”.
Type “winver.exe” in the dialog box and click OK.
If the "About Windows" box displays the following Service Pack(s), then this is a finding.

Unsupported Service Packs:
Windows 2008 – any prior to SP2

Support of SP1 for Windows 2008 ended 12 July 2011.

NOTE: Microsoft support for Windows Server 2008 will end January 14, 2020. At which time, use of Windows Server 2008 will result in a CAT I. Sites must migrate to a supported operating system prior to the end of support date.

Fix Text (F-30098r1_fix)
Update the system to a supported service pack. Application of new service packs should be thoroughly tested before deploying in a production environment.