Windows operating systems that are no longer supported by the vendor for security updates must not be installed on a system.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-4107	WIN00-000001	SV-49933r1_rule	DCSQ-1	Medium

Description
Windows operating systems that are no longer supported by Microsoft for security updates are not evaluated or updated for vulnerabilities leaving them open to potential attack. Prior to the end of support, organizations must plan for the transition to a supported operating system to ensure continued support and availability.

STIG	Date
Windows XP Security Technical Implementation Guide	2013-07-03

Details

Check Text ( C-45792r1_chk )
Support for Windows XP ends 8 April 2014. Six months prior to the end of support, organizations must have a migration plan to move systems to a supported operating system. Effective October 2012, if a plan is not in place to migrate to a supported operating system prior to the end of support for Windows XP, this is a finding. Effective 8 April 2014, using Windows XP is a Cat I finding.

Fix Text (F-43060r1_fix)
At least 6 months prior to the end of support, develop a migration plan to move systems to a supported operating system. Upgrade systems to a supported operating system prior to the end of support on 8 April 2014.