Microsoft admits Windows 11 has a GDID tracker with no off switch,

alimac

Well-known member
VIP
info
https://www.windowslatest.com/2026/...er-but-these-settings-limit-what-it-captures/

What you can do...
https://www.gadgetreview.com/windows-11-has-a-hidden-tracker-heres-how-to-limit-it

What do you think about this?
Yes or No

What protection does
At a high level, deGDID does two things:

Blocks known Microsoft registration paths by managing a region in the Windows hosts file, plus reinforcing the block with Windows Firewall rules.
Wipes known local GDID-related state across target-user, SYSTEM, and .DEFAULT identity locations, token device IDs, device tickets, Credential Manager entries, ConnectedDevicesPlatform, TokenBroker, WAM broker caches, and matching NegativeCache entries.

The tool is intentionally conservative. It refuses managed, domain-joined, Entra-joined, MDM-enrolled, or ambiguous multi-profile systems. It requires admin rights, it backs up what it touches, and it supports undo using .\degdid.ps1 -Unprotect.

https://windscribe.com/blog/windows-tracks-you-with-a-hidden-id-so-we-built-degdid-to-block-it/
 
Back
Top