The company said in a statement that it would take "appropriate legal action" against anyone possessing, or seeking to possess; posting, downloading or sharing the code that was discovered on the Web Feb. 12. "Specifically, Microsoft is sending letters explaining to individuals who have already downloaded the source code that such actions are in violation of the law," the statement said.
Microsoft also said in the statement that an investigation had shown that the unauthorized release of the Windows 2000 and Windows NT 4.0 source code wasn't the result of any breach in the company's corporate network or internal security. The leak also wasn't related to Microsoft's Shared Source Initiative or its Government Security Program.
Microsoft partner Mainsoft Corp. acknowledged last week that it was investigating reports that the code may have originated from the company. Mainsoft was one of the original licensees of Windows source code. Mainsoft officials weren't immediately available for comment on Wednesday.
Besides sharing source code with partners, Microsoft also makes Windows code available to security-sensitive government projects.
Microsoft has acknowledged that about 15% of the Windows 2000 and NT source code were found circulating on Windows enthusiast Web sites and throughout the cracker underground. However, the code couldn't be compiled, making it impossible for someone to recreate Windows for illegal distribution.
Many security experts played down the potential security threat, saying that just having the code didn't necessarily mean a hacker could exploit any vulnerability. On Monday, for example, Microsoft said a flaw discovered by an individual studying the code had already been addressed by the company through a previously released patch.
Stay connected and informed by visiting the CA Solutions Center Community!

Become a member today for instant access to free InformationWeek research, expert advice, peer perspectives, and more on the following topics:
- Application Performance Management (APM)
- Security Management
- Mainframe 2.0
- IT Automation
- Service Assurance
Also, visit our Government and Financial Services groups to see how these technologies apply specifically to those industries.
NOTE: Offer valid for U.S., U.S. possessions, & Canada only.