Unsupported Windows Endpoint
An endpoint is running a Windows version that has reached end of support, as with BrightPath Dental's OAK-FRONTDESK-03 workstation.
- Trigger
- Asset inventory evidence shows an installed OS version past its vendor end-of-support date.
- Risk
- Unsupported operating systems no longer receive security patches, so any newly disclosed vulnerability remains permanently unremediated. This raises AssurIQ Risk for the asset and any adjacent segment it can reach.
Prerequisites
- Confirm the exact OS build and vendor end-of-support date
- Identify whether the endpoint runs a required legacy application that blocks an in-place upgrade
- Confirm hardware compatibility with the target supported OS version
Recommended fix
- Confirm end-of-support status against the vendor lifecycle page and record it as evidence.
- Check hardware compatibility for the current supported Windows release.
- If compatible, schedule an in-place upgrade during a maintenance window and back up user data first.
- If incompatible or blocked by a legacy application, plan hardware replacement or an isolated, segmented network placement as an interim mitigation.
- Apply the upgrade or replacement, then confirm the endpoint reports a supported OS version.
- Re-scan the asset and update the End-of-Life finding to resolved.
Validation
- Asset inventory reports a currently supported OS version for the endpoint
- Vulnerability re-scan no longer flags the end-of-life finding
- Related control state reflects the resolved status with fresh evidence
Rollback and recovery
- If an in-place upgrade fails, restore from the pre-upgrade backup and revert to the previous OS build while re-planning replacement.
- If an interim network isolation was applied and later needs reversal, restore the original VLAN assignment once the endpoint is fully remediated.
Evidence generated
- Pre- and post-remediation OS version records
- Vendor end-of-support reference captured at time of assessment
- Updated finding status and control evidence