Some in management have absorbed enough information about security that they are dangerous. For example the belief that putting Server 2003 behind the firewall means that it’s no longer vulnerable to remote exploits.
Almost every server administrator who is still responsible for managing Windows Server 2003 is doing so because management won’t provide the resources to migrate. What might make management change its mind?
There is no doubt that running Windows Server 2003, a 13 year old unsupported operating system, is problematic. For many organizations, however, there are bigger problems to deal with than an unsupported operating system that still does its job.
I haven’t met an IT Pro who is happy that Windows Server 2003 is still in their environment. When I ask why it is still there then, they reply that management doesn’t want to provide the resources to make it go away.
There is some confusion as to what Azure AD can and cannot do and whether it could function as a cloud based domain controller.