Disposition of Windows Server 2003 Software

Note to readers

The Disposition of Windows Server 2003 Software ITPIN is no longer in effect. It was migrated to Appendix H: Standard on At-Risk Information Technology as of May 04, 2022.

Information Technology Policy Implementation Notice (ITPIN)

ITPIN No: 2015-03

Date:

The purpose of this Information Technology Implementation Notice (ITPIN) is to provide direction to departments and agencies with regard to the disposition of Windows Server 2003 software.

This ITPIN is effective immediately and applies to all Government of Canada departments and agencies within the meaning of Schedules I, I.1 and II of the Financial Administration Act. Departments and agencies are expected to be in compliance with the requirements set forth in this ITPIN by .

Background

Microsoft announced as the end of service date for Windows Server 2003 operating system software. Servers operating Microsoft Windows Server 2003 software are used to support a wide variety of Government of Canada business applications, web services, databases, and file and print services. 

To provide departments and agencies with sufficient time to plan and execute the migration of applications off of Windows Server 2003 based servers, a custom support agreement (CSA) with Microsoft has been implemented by Shared Services Canada (SSC). The CSA will provide departments and agencies with updates for critical and important security vulnerabilities and will be in effect until . The CSA will mitigate security and operational risks to some degree. However, Windows Server 2003 software is aging and not all vulnerabilities will or can be resolved under the CSA, which will lead to increased security and operational risks.

SSC is responsible for the CSA costs from through to . Departments and agencies will be responsible for the CSA costs, if needed, from through to .

Direction

Servers operating Windows Server 2003 software must be disconnected from Government of Canada (GC) networks by .

Servers operating Windows Server 2003 software that are required to meet operational needs after are to be isolated and contained within a tightly controlled network environment with no access to GC networks or the Internet.

Operating servers using Windows Server 2003 software in isolation zones is to be considered a temporary measure and the rationale and operating strategy is to be submitted to Treasury Board Secretariat’s Chief Information Officer Branch (CIOB) each year as part of the departmental IT Plan.

GC departments and agencies are not to put in place Windows Server 2003 Custom Support Agreements with Microsoft.

References

Additional information may be found in the following resources: Microsoft Support.

Please address any inquiries you may have by email to the CIOB IT Division.

Wade Daley
Chief Technology Officer of the Government of Canada
Chief Information Officer Branch
Treasury Board of Canada Secretariat

Page details

Date modified: