The Article NSA 'altered random-number generator' on the BBC news website mentions the question Who uses Dual_EC_DRBG? in this context:
For example, Microsoft had used the algorithm in software from Vista onwards, but had not enabled it by default, users on the Cryptography Stack Exchange pointed out.