Windows operating systems that are no longer supported by the vendor for security updates must not be installed on a system.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-4107	WIN00-000001	SV-85299r1_rule		Medium

Description
Windows operating systems that are no longer supported by Microsoft for security updates are not evaluated or updated for vulnerabilities leaving them open to potential attack. Prior to the end of support, organizations must plan for the transition to a supported operating system to ensure continued support and availability.

STIG	Date
Windows Vista Security Technical Implementation Guide	2016-08-12

Details

Check Text ( C-71155r1_chk )
Support for Windows Vista ends 11 April 2017. Organizations must have a migration plan to move systems to a supported operating system prior to support ending. If a plan is not in place to migrate to a supported operating system prior to the end of support for Windows Vista, this is a finding. Effective 11 April 2017, using Windows Vista is a Cat I finding.

Fix Text (F-76997r1_fix)
Develop a migration plan to move systems to a supported operating system. Upgrade systems to a supported operating system prior to the end of support on 11 April 2017.