Important Computer Security Reminder for All Marshall University Students, Faculty and Staff:
Marshall University Campus network support will no longer be provided for computers with Microsoft Windows 7 operating system after January 14, 2020.*
This notice is intended for Marshall University campus clients who are still using the Windows 7 operating system. Your cooperation is needed because Windows 7 clients will become sought-after targets for malicious users as a result of Microsoft’s end of support.
Microsoft announced in 2015 that on January 14, 2020 they will no longer provide extended support services for the Windows 7 operating system. According to the Microsoft Windows lifecycle fact sheet, this means that they will no longer provide automatic fixes, updates or online technical assistance.
Marshall IT is committed to working with campus departments in our shared responsibility to ensure a safe and reliable campus network. Periodically upgrading the operating system and/or replacement of unsupported computer hardware is a necessary part of system ownership; it is also crucial to protecting the security and reliability of the system, the data they contain and the networks to which they are connected. Failure to regularly update puts at risk both that system as well as other systems which share the same network.
Windows 7 Upgrade Resources
- Software – As a reminder, operating system upgrades for all University-owned computers are covered through the Microsoft O365 for Education enterprise license agreement. Devices running Microsoft Windows 7 are eligible to upgrade to the currently supported version of Windows 10 at no additional charge.
- Reimaging – the IT Service Desk team provides no-charge desktop/laptop reimaging services (using the standard operating system and application software) for University-owned computers.
- Hardware – If a computer hardware purchase is preventing your upgrade, please visit the website for ‘Technology Purchasing and Replacement Process’ to ensure the computer is on an appropriate budget/lifecycle replacement cycle.
Requesting An Exception for Windows 7 End-of-Life
*Note: The Marshall Office of Information Technology will work with IT Service Providers and their departments on a case-by-case basis to evaluate requests for Windows 7 clients which are providing business-critical functions for the University. Marshall departments and business units may submit their exception requests in writing/e-mail to the MU Office of Information Security (infosec@marshall.edu ).
Requests for support extension must include the following details:
- The reason(s) for requesting the exception. Multiple machines may be listed on a single request.
- The machine host name(s) in question, including the IP address and MAC address of each device.
- Point of contact information (telephone and e-mail) for the department head.
- Point of contact information (telephone and e-mail) for the department IT service provider or individual most familiar with the support of the computer or application requesting an exception.
- The length of time for the requested exception, with a maximum of one year
- The plan for upgrading or retiring the device at the end of the exception period
- The data classification level of each device (see section 3 of “ITG-4 Guidelines for Data Classification“)
- Which of the three device categories does the Windows 7 machine belong:
-
- Individual Use – no sensitive data accessed or stored
- Privileged use – administrative access to information systems
- Institutional use – stores significant quantities of sensitive data
- Proposed set of compensating controls which has (or can be) implemented for each device (i.e. client can function without any network access; client campus and/or Internet access can be restricted to a specific IP or range of IP addresses)
References
- Support for Windows 7 is Ending – https://www.microsoft.com/en-us/windowsforbusiness/end-of-windows-7-support
- https://support.microsoft.com/en-us/help/13853/windows-lifecycle-fact-sheet
We appreciate your cooperation to ensure a smooth transition over this coming year,
Jon B. Cutler | Chief Information Security Officer | Marshall University | 1 John Marshall Drive, DL-324 | Huntington, WV 25755-2066 | U.S.A. | Office: +1 304 696 3270 | Email: jon.cutler@marshall.edu | Twitter: @joncutler