This message was deleted.

I have no answer, but I worked a project back in 2015 where the security team, with ceo approval, shut down and removed the network cables for all the NT4 and Server 2000 servers at midnight on 31-Dec. The old servers and OSes and applications were deemed an unacceptable security risk

I can imagine the various compliance bodies making a small fortune in Dec

There is no excuse for not moving off the old OSs. It should be part of an on-going lifecycle plan. They've been warned for years. It's just lazy. But I expect many got used to the longevity of those older OSs. I love the challenge of moving apps when everyone else says it can't be done.

@Jeremy Saunders I totally agree. A couple of week ago I ran into a Windows Server 2003 VM at a customer. I had to do a logon, because their VPN software didn't support changing passwords on user accounts. Really strange experience which also displays the totally lack of security I have come across in many different customers during the last 3-5 years.

Yep we're in a last minute run to replace everything , there are some systems xp, w7 which run legacy if they're not on the network that's not a breach right?