● Covered by 2 sources · 2 reportsMedium impact2 neutral
Windscribe Releases deGDID Script to Block Microsoft's Global Device Identifier
Key points
- deGDID script removes existing GDIDs and blocks new ones.
- GDID is a server-assigned 64-bit Device PUID.
- The script is open-source and available on GitHub.
- Using deGDID may break some Microsoft cloud services.
- A federal criminal case highlighted GDID's tracking capabilities.
Overview of deGDID
Windscribe, a VPN company, has released an open-source PowerShell script named "deGDID." This script is designed to remove Microsoft's Global Device Identifiers (GDIDs) from Windows installations and prevent the creation of new ones. The tool is available on GitHub and requires administrative privileges to run.
Functionality and Operation
The deGDID script offers several operational flags. The "–Status" flag checks if a GDID is active on a system. "–Status –Redact" generates logs with the GDID redacted for privacy when sharing diagnostic data. The primary function, "–Protect," completely wipes existing GDIDs and blocks the DeviceAdd path to prevent new ones from being minted. A "–Unprotect" flag is available to revert the changes made by the script.
Understanding the Global Device Identifier (GDID)
The GDID is a server-assigned 64-bit Device PUID that Windows can acquire through Microsoft's DeviceAdd infrastructure. This identifier can be retained across several local identity stores, even when the user has only a local account. Its persistence has raised privacy concerns regarding device tracking.
Context and Implications
The development of deGDID follows a federal criminal case where a Microsoft GDID assisted the FBI in identifying an alleged hacker. While this demonstrated the GDID's tracking capabilities, it also highlighted the implications of a persistent tracker built into Windows. The script's creators acknowledge that using deGDID may disrupt some Microsoft cloud services that depend on device authentication.
Scope and Limitations
The deGDID script focuses specifically on removing and blocking the GDID. It does not claim to be a general solution for telemetry, browser privacy, or other forms of tracking. The tool's mutation path is designed for unmanaged personal Windows installations.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
GitHub yegors/deGDID GitHub cmc_internal/api GitHub github/collect GitHub _private/browser GitHub get-started/accessibility GitHub open-source/sponsorsHow outlets covered it
A new PowerShell script, degdid.ps1, has been released to remove existing Microsoft Global Device Identifiers (GDID) from Windows installations and prevent the minting of new ones. This tool addresses privacy concerns related to server-assigned installation identifiers that Windows can acquire even with local accounts.
Windscribe, a VPN provider, has developed an open-source script called "deGDID" that removes existing Microsoft Global Device Identifiers (GDIDs) from Windows PCs and prevents new ones from being created. This tool addresses privacy concerns related to persistent device tracking but may disrupt some Microsoft cloud services that rely on device authentication.