The patch is only necessary for ___domain controllers isn't it? If you're running Windows Server 2008 as DC, I don't want to know what your clients run.
I'm trying to get off! It's not easy! These apps won't run on a later version of Windows Server, they're too old! Tell my boss to give me more budget to get things done properly! :(
Haha, I was referring to the app server that's still running 2008. I guess maybe my comment wasn't relevant, as it's not a DC. Just thought I'd throw my frustration out there. :)
Getting the app upgraded or changed to not need 2008 is the hard part. If the app could run on a later version of Windows, this would be really easy. I'm sure you can appreciate how difficult that might be. For custom apps, it could be a lot of code to update. For vendor apps, that app would also probably need to be upgraded to a newer version because the app is also end of life for some years now. In our case, it's a vendor app. No time and money to fix this situation, so we just keep it running and pray.
Not so fun though for those who still are on Server 2008 though. (Yes, that is still a thing unfortunately.)