Microsoft ended support for Windows NT 4.0 server at the end of 2004; and support for Windows 4.0 workstation ended mid-2004. Users of this legacy operating system face escalating security risks due to new-found vulnerabilities to which there are no new fixes.

ITSD is recommending that all Windows NT 4 users upgrade to a newer version of the Windows operating system. Windows NT 4 workstation users should upgrade to Windows XP Professional. Windows NT 4 standard server users should upgrade to Windows 2000 Server or Server 2003. Users of a Windows NT 4 terminal server or advanced server for clustering or using more than four CPUs per machine should consult the Microsoft Web site to see if they require the enterprise or datacenter versions of the server operating system. These upgrades are needed to avoid future security compromises.

The Computer Protection Program (CPP) identified over 170 NT 4 systems at the Lab this February. CPP is working with divisions’ security liaisons to contact NT 4 system owners and help them migrate to newer operating systems. However, some equipment will not be upgradeable to a newer operating system. These systems will need additional protection (like firewalls) against future security breaches.

The Lab’s Windows NT 4 domain servers are among these systems. CPP is also working with ITSD to migrate users from the Windows NT 4-based domain to the Microsoft Active Directory environment. Many divisions have migrated to the new systems already. Plans are in place for several others to migrate in the coming months. Over 1,000 users now have accounts in the Active Directory, but over 600 users are still using the older NT 4 domain. The NT 4-based LBNL domain will be decommissioned after user accounts are migrated to the new Active Directory environment.

If you have an account in the LBNL NT 4 domain, but do not access any resources in that domain (file or print sharing) please contact the Help Desk (x4357) to migrate your account to the Active Directory.

Contact CPP’s Gene Schultz for more information.