tag: End-of-Life · 5 items
- Engineer — Plan: Audit endpoints for Windows 11 Home/Pro 24H2 and schedule upgrades to a supported build before the deadline; unpatched systems will stop receiving security updates, creating compounding exposure.
- SOC/IR — Skip
- Leader — Plan: Confirm whether any managed devices (dev machines, contractor endpoints) run Home/Pro 24H2 and ensure IT has an upgrade plan in place; unsupported devices become a compliance and vendor-attestation liability.
- Engineer — Plan: Mainstream support ending means no new feature or non-security fixes, though extended support (security patches) continues. Start migration planning to Windows Server 2025 this quarter to avoid a rushed lift when extended support eventually terminates.
- SOC/IR — Skip
- Leader — Plan: Add Windows Server 2022 migration to the infrastructure roadmap and next budget cycle; security patches continue under extended support, so there is no immediate risk, but delaying planning creates future upgrade-cost pressure.
- Engineer — Plan: Windows 10 ESU patch KB5120249 is available for 22H2/21H2; if you still run Win10 endpoints, apply this update and accelerate migration to Windows 11 before ESU costs escalate.
- SOC/IR — Skip
- Leader — Plan: If your organization is on Windows 10 ESU, factor this recurring patch cost into budget planning and set a Windows 11 migration deadline to avoid ongoing ESU licensing exposure.
- Engineer — Plan: If you still run Exchange 2016 or 2019 on-premises, schedule migration to Exchange Online or a supported version before October; after that date, unpatched RCE vulnerabilities will go unfixed on a historically targeted mail server.
- SOC/IR — Skip
- Leader — Plan: Confirm whether on-premises Exchange 2016/2019 remains in the estate; EOL removes the vendor’s security backstop and raises audit/compliance risk — budget and timeline for migration or decommission should be locked this quarter.
- Engineer — Plan: Audit your Server 2022 inventory and document any features relying on mainstream-only support; no immediate patching action required since security updates continue through extended support until 2031.
- SOC/IR — Skip
- Leader — Plan: Note the October 2026 mainstream support end on your risk register and vendor lifecycle tracking; security patches continue, so no urgent action, but budget planning for eventual migration or extended support agreements should begin this quarter.