Title

Systems must be maintained at a supported servicing level. (Cat I impact)

Discussion

Systems at unsupported servicing levels will not receive security updates for new vulnerabilities, which leave them subject to exploitation. Systems must be maintained at a servicing level supported by the vendor with new security updates.

Check Content

Open "Command Prompt". Enter "winver.exe". If the "About Windows" dialog box does not display "Microsoft Windows Server Version 1607 (Build 14393.xxx)" or greater, this is a finding. Preview versions must not be used in a production environment.

Fix Text

Update the system to a Version 1607 (Build 14393.xxx) or greater.

Additional Identifiers

Rule ID: SV-224828r569186_rule

Vulnerability ID: V-224828

Group Title: SRG-OS-000480-GPOS-00227

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.