Windscribe Blocks Microsoft's Hidden Windows GPID Script
Windscribe, a consumer VPN and privacy-software company, has developed an open-source PowerShell script called deGDID. The script targets Microsoft's Global Device Identifier (GDID), which tracks Windows installations across Microsoft services, even when using a VPN.
The GDID remains the same even if the network address changes, raising concerns about device tracking. A US legal complaint highlighted how Microsoft records tied a specific ID to activities involving Peter Stokes, accused of being part of the group Scattered Spider.
Windscribe's Protect mode deletes known GDID-related data and sets up a firewall to block device-registration routes. It also includes read-only checks and hides identifier values in logs. However, it requires admin rights and may affect signing into Microsoft accounts or using certain services like Xbox or OneDrive.
The tool cannot delete historical records or guarantee that future Windows changes won't recreate related identifiers.