# Tool Deletes Microsoft's GDIDs and Prevents New Minting A new solution for Windows device identity security. - **Source:** [Hacker News](https://news.ycombinator.com) - **Published:** 2026-08-09 - **Original article:** - **On Brifing:** https://brifing.si/s/8a7bf1c2-f6f4-4f59-a5b2-06d5c9ca997f ## What is GDID? Microsoft's Global Device Identifier (GDID) is a server-assigned identity for Windows devices. This identifier can be acquired by the device even if the user has a local account. GDID represents the device's unique identity and can be stored in multiple local identity repositories. This identifier has even been used in court records. ## Purpose of degdid.ps1 The degdid.ps1 script is designed to delete all instances of GDID on Windows devices and prevent new GDID minting. This tool is optimized for personal Windows installations. The script ensures the removal of GDID from local stores and continuously blocks the DeviceAdd path on supported Windows versions. ## Historical Use of GDID Court records from 2026 revealed that Microsoft associated GDIDs with URLs, timestamps, and IP addresses. These records did not specify which Windows component or network channel was responsible for this association, but it is clear that GDID was used for device identity tracking. degdid.ps1 does not claim to block such channels. ## Supported Systems degdid.ps1 has been fully tested on Windows 11 25H2/build 26200. Other Windows versions and builds are accepted with warnings. Managed systems, ambiguous users, and systems with multiple loaded human profiles are not supported. The script refuses to run on such systems. ## Protection Process degdid.ps1 follows a series of steps to delete GDID and prevent new minting. The script first performs necessary checks and stops the protection process if any fail. Protection is achieved through the Wipe operation. Decoy mode is for research purposes and is not considered a clean completion state. ## Impacts and Limitations Using degdid.ps1 may disrupt or weaken identity workflows such as Microsoft Account (MSA) sign-in, Xbox authentication, and OneDrive MSA sign-in. Windows Update scans and Defender updates worked in the lab, but controlled pending updates remain unvalidated. Domain, Entra, and MDM systems are not supported. ## Security and Ethics degdid.ps1 should be used for research, privacy hardening, and analysis of opaque device identity. This tool should not be used as a guide to evade lawful processes or commit crimes. Private machine GDIDs, device tickets, and unredacted Status JSON output should not be shared. The court example is source material, not a lab secret. ## Conclusion and Importance degdid.ps1 is a crucial tool for deleting GDID and preventing new minting on Windows devices. This tool is specifically designed for personal privacy security and provides effective protection on supported systems. However, it is important for users to understand the potential impacts and limitations of using the tool. ## Sources covering this story - https://github.com/yegors/deGDID — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._