TA14-310A: Microsoft Ending Support for Windows Server 2003 Operating System

["US-CERT" <US-CERT () ncas us-cert gov>]

NCCIC / US-CERT

National Cyber Awareness System:

TA14-310A: Microsoft Ending Support for Windows Server 2003 Operating System [ 
https://www.us-cert.gov/ncas/alerts/TA14-310A ] 11/10/2014 07:19 AM EST 
Original release date: November 10, 2014

Systems Affected

Microsoft Windows Server 2003 operating system

Overview

Microsoft is ending support for the Windows Server 2003 operating system on July 14, 2015.[1] [ 
http://support2.microsoft.com/lifecycle/search/default.aspx?alpha=Windows+Server+2003+R2 ] After this date, this 
product will no longer receive:


  * Security patches that help protect PCs from harmful viruses, spyware, and other malicious software 
  * Assisted technical support from Microsoft 
  * Software and content updates 

Description

All software products have a lifecycle. End of support refers to the date when Microsoft will no longer provide 
automatic fixes, updates, or online technical assistance.[2] [ http://support2.microsoft.com/gp/lifepolicy ] As of July 
2014, there were 12 million physical servers worldwide still running Windows Server 2003.[3] [ 
http://redmondmag.com/articles/2014/09/18/server-2003-end-of-support.aspx ]

Impact

Computer systems running unsupported software are exposed to an elevated risk to cybersecurity dangers, such as 
malicious attacks or electronic data loss.

Users may also encounter problems with software and hardware compatibility since new software applications and hardware 
devices may not be built for Windows Server 2003.

Organizations that are governed by regulatory obligations may find they are no longer able to satisfy compliance 
requirements while running Windows Server 2003.

Solution

Computers running the Windows Server 2003 operating system will continue to work after support ends. However, using 
unsupported software may increase the risks of viruses and other security threats. Negative consequences could include 
loss of confidentiality, integrity, and or availability of data, system resources and business assets.

The Microsoft "Microsoft Support Lifecycle Policy FAQ" page offers additional details.[2] [ 
http://support2.microsoft.com/gp/lifepolicy ]

Users have the option to upgrade to a currently supported operating system or other cloud-based services. There are 
software vendors and service providers in the marketplace who offer assistance in migrating from Windows Server 2003 to 
a currently supported operating system or SaaS (software as a service) / IaaS (infrastructure as a service) products 
and services.[4 [ http://www.microsoft.com/en-us/server-cloud/products/windows-server-2003/ ],5 [ 
http://searchwindowsserver.techtarget.com/feature/Weighing-next-steps-following-Windows-Server-2003-end-of-life ]] 
US-CERT does not endorse or support any particular product or vendor.

References

  * [1] Microsoft Product Lifecycle Listing [ 
http://support2.microsoft.com/lifecycle/search/default.aspx?alpha=Windows%20Server%202003%20R2 ] 
  * [2] Microsoft Support Lifecycle Policy FAQ [ http://support2.microsoft.com/gp/lifepolicy ] 
  * [3] Redmond Magazine, Prepare for Windows Server 2003's End of Support [ 
http://redmondmag.com/articles/2014/09/18/server-2003-end-of-support.aspx ] 
  * [4] Windows Server 2003 Migration Support [ 
http://www.microsoft.com/en-us/server-cloud/products/windows-server-2003/ ] 
  * [5] TechTarget, Weighing next steps following Windows Server 2003 end-of-life [ 
http://searchwindowsserver.techtarget.com/feature/Weighing-next-steps-following-Windows-Server-2003-end-of-life ] 

Revision History

  * November 10, 2014: Initial Release 
________________________________________________________________________

This product is provided subject to this Notification [ http://www.us-cert.gov/privacy/notification ] and this Privacy 
& Use [ http://www.us-cert.gov/privacy/ ] policy.

________________________________________________________________________

OTHER RESOURCES: Contact Us [ http://www.us-cert.gov/contact-us/ ] | Security Publications [ 
http://www.us-cert.gov/security-publications ] | Alerts and Tips [ http://www.us-cert.gov/ncas ] | Related Resources [ 
http://www.us-cert.gov/related-resources ] 

STAY CONNECTED: Sign up for email updates [ http://public.govdelivery.com/accounts/USDHSUSCERT/subscriber/new ]