I thought I would never write about Windows XP again… and yet… I came across a network where there are still quite a few of them and, surprisingly, they are holding up (perhaps thanks to a dozen or so people who keep them under control).

For those who have not read it, I recommend:

https://www.microsoft.com/en-us/WindowsForBusiness/end-of-xp-support

It is clear that not everyone can run to the store and buy several dozen licenses immediately, so what can be done to survive somehow?

• Limit the privileges of people using the systems to the absolute minimum.
• Enable firewalls on the machines for both incoming and outgoing connections.
• Move the computers to a separate subnet where traffic will be strictly monitored.
• Install all available updates for the operating system and components.
• Uninstall unused operating system components and unnecessary software.
• Limit Internet connectivity to the absolute minimum.
• Use an alternative, current browser.
• Limit browser use and clear browser cache after every close.
• If possible, disconnect the computer from the network.
• Provide a high level of antivirus protection for removable devices, or consider disabling them.
• Verify that the backup mechanisms in use allow system recovery and activation without connecting to Microsoft servers.
• Deploy and configure additional security mechanisms, such as Enhanced Mitigation Experience Toolkit.
• Use application whitelisting mechanisms.
• Wherever possible, use domain policies to introduce restrictions.
• Provide additional training for users of these systems: what to do when a virus is detected, how to handle media of unknown origin, and so on.