Tool Deletes Microsoft's GDIDs and Prevents New Minting
A new solution for Windows device identity security.
1What is GDID?
Microsoft's Global Device Identifier (GDID) is a server-assigned identity for Windows devices. This identifier can be acquired by the device even if the user has a local account. GDID represents the device's unique identity and can be stored in multiple local identity repositories. This identifier has even been used in court records.
2Purpose of degdid.ps1
The degdid.ps1 script is designed to delete all instances of GDID on Windows devices and prevent new GDID minting. This tool is optimized for personal Windows installations. The script ensures the removal of GDID from local stores and continuously blocks the DeviceAdd path on supported Windows versions.
3Historical Use of GDID
Court records from 2026 revealed that Microsoft associated GDIDs with URLs, timestamps, and IP addresses. These records did not specify which Windows component or network channel was responsible for this association, but it is clear that GDID was used for device identity tracking. degdid.ps1 does not claim to block such channels.
4Supported Systems
degdid.ps1 has been fully tested on Windows 11 25H2/build 26200. Other Windows versions and builds are accepted with warnings. Managed systems, ambiguous users, and systems with multiple loaded human profiles are not supported. The script refuses to run on such systems.
5Protection Process
degdid.ps1 follows a series of steps to delete GDID and prevent new minting. The script first performs necessary checks and stops the protection process if any fail. Protection is achieved through the Wipe operation. Decoy mode is for research purposes and is not considered a clean completion state.
6Impacts and Limitations
Using degdid.ps1 may disrupt or weaken identity workflows such as Microsoft Account (MSA) sign-in, Xbox authentication, and OneDrive MSA sign-in. Windows Update scans and Defender updates worked in the lab, but controlled pending updates remain unvalidated. Domain, Entra, and MDM systems are not supported.
7Security and Ethics
degdid.ps1 should be used for research, privacy hardening, and analysis of opaque device identity. This tool should not be used as a guide to evade lawful processes or commit crimes. Private machine GDIDs, device tickets, and unredacted Status JSON output should not be shared. The court example is source material, not a lab secret.
8Conclusion and Importance
degdid.ps1 is a crucial tool for deleting GDID and preventing new minting on Windows devices. This tool is specifically designed for personal privacy security and provides effective protection on supported systems. However, it is important for users to understand the potential impacts and limitations of using the tool.
Original article: Hacker News — Microsoft'un GDID'lerini Silen ve Yeni Oluşumunu Engelleyen Araç