CIS CYBER ALERT

DATE ISSUED:
04/16/2015

SUBJECT:
Support for Windows Server 2003 Ending July 14, 2015

CIS would like to remind you that Microsoft Windows Server 2003 (including all Service Packs) will reach the end of their product life cycles on July 14, 2015. As a result, Microsoft will no longer provide security updates, hot fixes, or technical support for any version of Windows Server 2003. Failure to properly upgrade end-of-life systems in a timely manner may potentially subject the organization to a higher level of risk, thus increasing the potential for compromise.

Based on our current domain database, 26% of all state, local, tribal and territorial Windows-based web servers are running Windows Server 2003.

RECOMMENDATIONS:
Since these systems will no longer be supported after July 14, 2015, they pose a significant security risk to organizations using them. We recommend organizations inventory their systems to determine if Windows Server 2003 is still in use. A proper migration plan should be developed to ensure the operating system is upgraded to a supported product.

REFERENCES:
http://www.microsoft.com/en-us/server-cloud/products/windows-server-2003/