So here's my situation: I'm not a sys admin, just a regular guy who once studied network administration (never graduated, by the way). Recently, one of the system admins asked me to get in touch with machine manufacturers about switching our factory computers to Windows 11. We have two main machines—a German one running Windows 7 and an Italian one that's on a newer version of Windows CE. Both have internet access only for remote help from their makers. My question is, why is this upgrade necessary? Are there options like port blocking that could help instead? I get the push for Windows 11—after all, we had a cyber incident recently, so security is probably a big concern now.
5 Answers
You definitely need to upgrade mainly for security updates. Once Windows 10 hits its end of life in October, there won't be any patches for any vulnerabilities, leaving those systems wide open for threats. Since you're using these computers for machinery, definitely consult with the manufacturers before making any changes. They might not support newer OS versions. There are ways to bolster security without upgrading, but talking to a local security expert might give you some good options.
You're dealing with industrial machines, where changes can be tricky. Generally, you shouldn't mess with these systems unless the manufacturer says it's okay. It's common to keep control computers on older OS versions, but if needed, segregate them on their own network without internet access.
Having a Windows 7 machine online? That's a huge risk. You should have been doing something about this a while ago when they announced end of life. It’s risky for end-of-life systems to even have internet access.
I wouldn’t recommend getting involved too deeply. It sounds like a potential mess, and you might end up being blamed if things go south. Stick to giving them basic info and let IT handle the heavy lifting.
Honestly, it's a bit odd that the IT department is putting this on you. Software that's reached its end of life won't get any updates, which makes it a security risk for ransomware attacks. Maybe let your system administrator handle this one instead.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures