Possible action required - Windows Server 2008/R2

November 29, 2018

Summary

  • Windows Server 2008/R2 will no longer be supported by Microsoft after January 14, 2020. 
  • Devices running Windows 2008/R2 will no longer meet the security requirements found in Yale Policy 1610.5 and will not be provided with IT support absent an approved policy exception request form from Information, Security, Policy and Compliance. Details on requested actions are below. 
  • IT professionals are requested to address systems and/or applications that require an upgrade or are incompatible with Windows Server 2016 as soon as possible.
  • If you will no longer require Windows Server 2008/R2 or after January 14, 2020, no further action is required. 
 
Details
 
Operating systems that have reached end of life present significant potential threat to the University. On January 14, 2020, Windows Server 2008/R2 will be out of support by Microsoft. Due to time and effort involved in migrating to a modern operating system (OS) platform, it’s best to start planning now. 
If you believe that you will no longer require Windows Server 2008/R2 or after January 14, 2020, no further action is required. 
 
If your application is needed beyond January 14, 2020, Yale Information Security, Policy and Compliance recommends that you consider what resources are needed to transition to Windows Server 2016, including budget requests to address the following (if applicable): 
 
  • New hardware and software to make your application compatible with the Windows 2016 operating system.
  • Professional services from a vendor to assist in the migration to a new platform or an application upgrade compatible with the Windows 2016 operating system. 
 
You may wish to consult with your users to determine if future requirements necessitate a different platform (such as SaaS-software as a service) to supersede the need to move to Windows Server 2016.
 
Enforcement of Yale Policy 1610.5
 
Yale Policy 1610.5 states that, “Devices running deprecated and unsupported operating systems will be denied access to the Yale network or internet”.  IT support for these devices will not be provided absent an approved policy exception request form. Policy exceptions should be submitted by July 14, 2019.  Details on how to submit this request can be found on IT at Yale’s Microsoft Windows 2008 End of Life web page. All approved exceptions will require compensating controls are applied and exceptions for high risk systems will only be approved under extraordinary cases. 
 
For unusual circumstances requiring the continued use of Windows 2008/R2, submit a policy exception request form prior to July 14, 2019.  Information may also be found on IT at Yale’s Microsoft Windows 2008/R2 End of Life web page.
 
For questions or concerns regarding Windows 2008/R2 End of Life, please contact the Information Security, Policy and Compliance team.