Systems must be at supported service pack (SP) or release levels.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-1073	2.005	SV-32242r4_rule		High

Description
Systems at unsupported service packs or releases will not receive security updates for new vulnerabilities and leaves them subject to exploitation. Systems must be maintained at a service pack level supported by the vendor with new security updates.

STIG	Date
Windows Server 2008 R2 Domain Controller Security Technical Implementation Guide	2019-06-18

Details

Check Text ( C-94143r1_chk )
Run "winver.exe". If the "About Windows" dialog box does not display the following version or greater, this is a finding. "Microsoft Windows Server Version 6.1 (Build 7601: Service Pack 1)" No Release Candidates or Beta versions will be used in a production environment. The initial release of Windows Server 2008 R2 is unsupported as of 9 April 2013. Systems must be updated to Service Pack 1. NOTE: Microsoft support for Windows Server 2008 R2 will end January 14, 2020. At which time, use of Windows Server 2008 R2 will result in a CAT I. Sites must migrate to a supported operating system prior to the end of support date.

Check Text ( C-94143r1_chk )

Run "winver.exe".

If the "About Windows" dialog box does not display the following version or greater, this is a finding.
"Microsoft Windows Server
Version 6.1 (Build 7601: Service Pack 1)"

No Release Candidates or Beta versions will be used in a production environment.

The initial release of Windows Server 2008 R2 is unsupported as of 9 April 2013. Systems must be updated to Service Pack 1.

NOTE: Microsoft support for Windows Server 2008 R2 will end January 14, 2020. At which time, use of Windows Server 2008 R2 will result in a CAT I. Sites must migrate to a supported operating system prior to the end of support date.

Fix Text (F-30098r1_fix)
Update the system to a supported service pack. Application of new service packs should be thoroughly tested before deploying in a production environment.