I am in the process of conducting an examination of a Dell laptop.  The laptop originally had Windows 2000 professional (based on product key information on sticker on the back of the laptop).  The laptop now has a very recently installed version of Windows XP and Office version 11.0.  We are trying to determine if the o/s and application software are bootleg copies.  I obtained product ID information from the registry for the installed versions of XP and Office.  We contacted Microsoft and were informed that XP product ID information comes back as a manufacturers license (Dell, HP, etc.).  Microsoft could not identify which manufacturer.  The product ID for Office 11.0 came back as not a valid ID for Office (came back as a key for Windows server professional).  Microsoft was unable to provide any additional information on the Office product ID.

I would be interested in any suggestions for identifying the manufacturer who holds the license for the copy of XP that is currently installed on the laptop and any other suggestions for pursuing license holder information.  Also, are there other steps that I can take during the examination to determine if the o/s and application software is legitimate?

If Microsoft doesn't have the information (odds are they do) then I would start looking at where the laptop came from. I would check with Dell and see what you could find... like who purchased it. Was it a person or business?  If that’s a dead end then start looking at the documents on the computer. E-mails are a good place to start and depending on if your law enforcement or "other" you might be able to call up any companies found and find out if your key matches any of theirs.

-Josh