Korben00
no-gdid
no-gdid is a PowerShell-based tool to audit and block the Windows Global Device Identifier (GDID), a per-account device ID used by Microsoft and shared with law enforcement, based on verified reverse engineering.
AI 仓库情报摘要
FR-AI / ANALYSIS为什么值得关注
它解决了隐私问题，允许用户更改一个持久且与硬件关联的标识符，而通常不重装 Windows 就无法更改。
适合谁使用
- 关注隐私的 Windows 用户
- 研究设备指纹的安全研究人员
- 希望在硬件更改后重置设备身份的用户
- 非域环境中的 IT 管理员
典型使用场景
- 硬件修改后重置设备追踪
- 测试设备注册行为
- 匿名化 Windows 安装的身份
- 从意外的设备注册问题中恢复
项目优势
- 已在 Windows 10 和 11 的虚拟机中测试并确认网络流量
- 无需重装 Windows
- 在同一硬件上也能使用，不限于全新安装
- 基于法律文件中公开的 GDID 信息
使用前须知
- 可能导致用户退出 Microsoft Store、OneDrive 和 Office 365 等服务
- 不建议在已加入域或使用 Active Directory 的环境中使用
- 需要管理员权限和互联网连接
README 快速开始
GDID-Changer for Windows 10/11
Script that regenerates GDID assigned to your windows installation. It works by removing existing sessions and forcing new device registration. Resulting in issuance of new GDID by Microsoft servers. This script initiates exactly the same device registration process that occurs after a fresh Windows installation.
Requires an internet connection and administrator permissions. A new GDID is usually issued instantly, but script needs around 30–90 seconds to complete the job.
Use caution on domain-joined systems or managed environments. Removing device registration data may affect session states. Do not use this script if your environment relies on Windows SSO or Active Directory (AD), as it may disrupt authentication. This script removes Microsoft session and device tokens stored locally on the device. It attempts to identify and remove only the relevant tokens, but users may be signed out of services such as Microsoft Store, Xbox App, OneDrive, Microsoft 365 (Office 365) and Teams.
The script can force issuance of a new GDID even on the same hardware, but changing hardware identifiers before re-registration is recommended (see the end of this page).
Tested in a local virtual machine environment on Windows 11 and Windows 10 using a local account. The device registration process was confirmed by intercepting network traffic. The research was performed manually
Background
GDID became publicly discussed after it was mentioned in the Peter Stokes indictment:
https://www.justice.gov/usao-ndil/media/1450651/dl?inline
According to a Microsoft representative, a Global Device Identifier in the Windows ecosystem is a persistent, device-level identifier designed to uniquely identify an installation of a Windows operating system on a device, either a physical device (e.g., a mobile phone or laptop) or virtual machine, across certain Microsoft services and scenarios. A GDID is a globally unique identifier tied to the installation of Windows on a device. A GDID remains consistent across Windows operating system updates on a device, but a reinstall of Windows, either on the same device or on a different device, will be tied to a new unique GDID
What is GDID and how is it generated?
GDID (Global Device Identifier) is a persistent identifier generated by Microsoft servers based on hardware information collected
项目描述
A script that requests the generation of a new GDID from Microsoft servers and assigns it to the Windows installation.
相关仓库与替代方案
根据分类、Topic 和编程语言匹配的相似项目。
LewdM3at
PC-Cartridge-System
A hobby project that turns 2.5" SATA SSDs into physical game cartridges for your Steam library, automatically launching games or custom actions when inserted.
CYEBRSYSTEM-AliAlame
IntuneToolKit
A PowerShell toolkit with 12+ scripts for day-to-day Intune/Entra ID administration, including policy reporting, compliance checks, stale device cleanup, BitLocker management, bulk actions, and policy conflict troubleshooting.