I thought I would never write about Windows XP again… and yet… I came across a network where there are still quite a few of them and, surprisingly, they are holding up (perhaps thanks to a dozen or so people who keep them under control).
For those who have not read it, I recommend:
https://www.microsoft.com/en-us/WindowsForBusiness/end-of-xp-support
It is clear that not everyone can run to the store and buy several dozen licenses immediately, so what can be done to survive somehow?
- Limit the privileges of people using the systems to the absolute minimum.
- Enable firewalls on the machines for both incoming and outgoing connections.
- Move the computers to a separate subnet where traffic will be strictly monitored.
- Install all available updates for the operating system and components.
- Uninstall unused operating system components and unnecessary software.
- Limit Internet connectivity to the absolute minimum.
- Use an alternative, current browser.
- Limit browser use and clear browser cache after every close.
- If possible, disconnect the computer from the network.
- Provide a high level of antivirus protection for removable devices, or consider disabling them.
- Verify that the backup mechanisms in use allow system recovery and activation without connecting to Microsoft servers.
- Deploy and configure additional security mechanisms, such as Enhanced Mitigation Experience Toolkit.
- Use application whitelisting mechanisms.
- Wherever possible, use domain policies to introduce restrictions.
- Provide additional training for users of these systems: what to do when a virus is detected, how to handle media of unknown origin, and so on.