Detections
Analytics
WN22-00-000100 - Windows Server 2022 must be maintained at a supported servicing level.
Information
Systems at unsupported servicing levels will not receive security updates for new vulnerabilities, which leave them subject to exploitation. Systems must be maintained at a servicing level supported by the vendor with new security updates. For Windows Server 2022, Microsoft made the following statement at https://support.microsoft.com/en-us/servicing/os/windows-server/2026/08/kb5120242-windows-server-2022-security-update regarding ongoing OS support:'On October 13, 2026, Windows Server 2022 will reach end of mainstream support. The October 2026 security update will be the last mainstream support update available for this version. After this date, Windows Server 2022 will transition to extended support, which includes security updates at no additional cost, and will continue to receive monthly security updates through October 14, 2031.'
The Long-Term Servicing Channel (LTSC) remains the standard support branch for Enterprise server platforms. The guidance in this rule assumes usage via this support channel.
Solution
Ensure the system is at Version 21H2 (Build 20348.xxx) or greater.Determine if the end-of-support date for the system's OS build is a past date.
If the end-of-support date for the system's OS build is in the past, perform an update to an OS build whose end-of-support date is a future date.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2022_V2R11_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows Server 2022 STIG v2r11
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-254247r1260017_rule, STIG-ID|WN22-00-000100, Vuln-ID|V-254247
Plugin: Windows
Control ID: 3204a4f52c63e3df89c374ba2c84d275b689423ed0e6a96d0659af55b85b9690