We still have one production SQL 2008 R2 Server. Yes, there are plans to upgrade soon, just not immediately. In the meantime, our Vulnerability reports are flagging the server as vulnerable because it has End of Life software:

  • EOL/Obsolete Software: Microsoft Visual Studio 2008 Detected
  • EOL/Obsolete Software: Microsoft SQL Server Compact 3.5 Detected

Add Remove Screenshot

So we want to see if we can remove these components to resolve the vulnerability.

However, doing due diligence, I noticed that the install date for these under Add/Remove Programs is the same as the install date for SQL Server 2008 R2 itself.

So now I'm thinking these are "part of" SQL Server 2008 R2, and maybe it's not safe to remove them. Googling doesn't reveal anything definitive, with a lot of the found articles no longer available.

My question is can the be removed without negative impact to SQL Server 2008 R2, and if not, can they be upgraded to a version that's not EOL?

  • 4
    You can safely remove them, but there's more urgent security concerns with your system.
    – ErikEJ
    Oct 1 '20 at 17:43
  • @ErikEJ, that's great to know - do you have any reference for that? It would give our team better confidence to do it. Happy to accept your answer if you want to enter it as one.
    – Sandra
    Oct 2 '20 at 12:56
  • @Sandra, Where you able to remove Microsoft SQL Server Compact 3.5 without affecting SQL Server 2008 R2?
    – Brad
    Jul 9 '21 at 14:54
  • @Brad, Yes, I went with ErikEJ's answer, removed it just via Add/Remove Programs, and all was well on our 2 servers.
    – Sandra
    Jul 11 '21 at 16:32

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.