Systems must be at supported service pack (SP) or release levels.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-1073	2.005	SV-32242r2_rule	VIVM-1	High

Description
Systems at unsupported service packs or releases will not receive security updates for new vulnerabilities and leaves them subject to exploitation. Systems must be maintained at a service pack level supported by the vendor with new security updates.

STIG	Date
Windows Server 2008 R2 Domain Controller Security Technical Implementation Guide	2013-03-14

Details

Check Text ( C-40785r1_chk )
Run “winver.exe”. If the "About Windows" dialog box does not display “Microsoft Windows Server Version 6.1 (Build 7600)” or greater this is a finding. No Release Candidates or Beta versions will be used in a production environment. The initial release of Windows Server 2008 R2 will be unsupported as of 9 April 2013. Systems must be updated to Service Pack 1 by this date.

Fix Text (F-30098r1_fix)
Update the system to a supported service pack. Application of new service packs should be thoroughly tested before deploying in a production environment.