Click here: to donate by Credit Card
Or here: to donate by PayPal
Or by mail to: Free Republic, LLC - PO Box 9771 - Fresno, CA 93794
Thank you very much and God bless you.
Posted on 07/23/2026 7:40:27 AM PDT by dayglored
Microsoft has confirmed that Windows has a previously unknown Global Device ID (GDID), a permanent, unique digital identifier assigned to Windows devices that can tie a user's actions to their device. This came to light when an alleged member of a notorious hacking group was caught at an airport after Microsoft handed over his GDID to the authorities.
Microsoft describes the GDID in a published complaint (via Windows Latest) as "a persistent, device-level identifier designed to uniquely identify an installation of a Windows operating system on a device, either a physical device (e.g., a mobile phone or laptop) or virtual machine, across certain Microsoft services and scenarios."
So when you first set up Windows, or register a new Windows device, Microsoft ties that installation's GDID to you. Anything that happens on that system can then be traced back to you, the individual. Privacy and security settings in Windows 11. Privacy and security settings in Windows 11.
You can't adjust this in Windows settings.Credit: Jon Martindale
Windows Latest discovered that this is generated at the server side, but is also stored locally. It can be found in the Windows registry under: "HKCU\\SOFTWARE\\Microsoft\\IdentityCRL\\ExtendedProperties."
Although this number remains when you update Windows, it is updated if you reinstall Windows, assigning you a new GDID—though the original one may remain recorded as well.
(Excerpt) Read more at tech.yahoo.com ...
|
|
Click here: to donate by Credit Card Or here: to donate by PayPal Or by mail to: Free Republic, LLC - PO Box 9771 - Fresno, CA 93794 Thank you very much and God bless you. |
In the case of the alleged hacker, he had used the same device for all his online activities, so even if his identity was hidden through other means, Microsoft was able to tie all those activities together. When Microsoft was able to spot patterns in behavior that matched those of a particular GDID it held on account, it was able to coordinate with authorities to tie the activities to the hacker in question, giving up his identity and leading to his eventual arrest and charges brought against him.
This has raised concerns among privacy advocates about Microsoft not providing an opt-out option for this level of tracking.
From Google/AI (the usual caveats about AI info apply):
The Windows Global Device ID (GDID) is a persistent, permanent digital identifier assigned to a Windows installation. It was introduced with the initial release of Windows 10 in 2015 as part of Microsoft's core telemetry infrastructure.
The GDID gained intense public attention in July 2026 after a leaked FBI criminal complaint revealed that Microsoft provided a suspect's GDID and associated IP log history to law enforcement, bypassing the anonymity of a VPN.
What is the GDID used for?
Microsoft utilizes the identifier for several internal operating system and cloud-related functionalities:
Licensing & Activations: It binds a specific Windows license to a precise machine configuration, ensuring compliance with activation rules.
Core App Management: It manages application state and installations through the Microsoft Store and Universal Windows Platform (UWP).
System Optimization: The wlidsvc (Windows Live ID) service requests a Device PUID from Microsoft login servers, which the Connected Devices Platform registers. Services like Delivery Optimization report this ID back when sharing or downloading Windows updates.
Telemetry & Tracking: It links a massive pipeline of user data—such as web browsing habits, search history, error logs, and app usage—to a singular identity, tracking your device across different networks.
Where is it located, and can you turn it off?
The identifier cannot be turned off or disabled through normal Windows privacy settings, as doing so would break core OS functions like app downloads and software activation.
Registry Location: You can find your specific identifier stored locally on your PC under HKCU\SOFTWARE\Microsoft\IdentityCRL\ExtendedProperties (formatted with a lowercase "g" prefix followed by a decimal number).
Persistence: The GDID survives basic Windows updates, browser resets, and account modifications. It does not survive a complete, clean wipe and reinstallation of the operating system, which forces the creation of a brand new GDID (though Microsoft maintains logs of the historical ID).
I’m going to try to verify the Google/AI info and report back here.
 |  |
|---|
Is this part of Win 10 as well?
This is another reason why Microsoft requires that you have a Microsoft Account for your Windows computer.
They tie your computer's Windows GDID to your Microsoft Account, and this ties to YOU as an individual.
Everything you do with your computer, regardless of VPN, IP anonymizing, etc. is directly traceable to you.
Of course, if you're not doing anything bad (*), there's no need to be concerned. Right? /s
(*) Bad: Counter to the approved narrative.
YES. It was silently introduced in 2015 with Windows 10.
This jibes with what a MS employee relative told me about ten years ago. At the time, I didn’t believe him. I do now.
I heard similar. Back then it was under the auspices of dealing with all the pirating of Windows in China.
Wondering if this is true of Windows running on a Linux VirtualBox.
I didn’t make the Chinese connection, although I should have.
I am sure it is.
The only way around this would be to build a computer with parts paid for with cash and install Linux fresh.
Then never use it for anything remotely related to you and never use it at your home/work.
Or, I suppose, you could buy a windows computer for cash and do the same thing, and then treat it like a burner phone, and toss it.
Yes, it is stamped into the Windows VM running in VirtualBox in Linux, just like it is if Windows is installed "native" on the hardware.
But note: It is not part of the computer's hardware. So if you installed Linux "native" on the hardware (e.g. wiped the disk and installed Linux from scratch), the Linux system is untouched when you install VirtualBox and start up a Windows VM. It's only the Windows VM that gets the GDID.
Not exactly. Correct that a VPN solves a different problem.
But the GDID is not "stamped into the chassis" the way the VIN is stamped into a vehicle. The GDID is only part of the Windows installation, not the computer hardware.
The computer hardware is unaffected.
And if you run Windows as a virtual machine (VM) inside of a different operating system (Linux, MacOS), only the Windows VM has the GDID. The host OS (Linux, MacOS) is unaffected.
>Wondering if this is true of Windows running on a Linux VirtualBox.
Pretty sure that would be the case for 10 or 11. I wouldn’t be using any Microsoft application or anything providing your real identity on it. I run Windows 11 ioT Enterprise and provided nothing to fully activate it.
MSFT, GOOG, META should all have been broken up years ago.
Might as well put tracking and listening devices in all of us at birth.. This is out of control.
I am currently in the process of getting rid of Outlook in order to create more room in the VM which is crowding my GPU (an RTX 3050) for running PowerPoint on a VM. Ran Outlook 2007 for a very long time, but had to install Outlook Classic as part of the conversion to Ubuntu running a virtual machine. So far, only about 50% of the backup emails I kept have run successfully through readpst (a mere 350,000 files over 20 years). Got them translated to eml. The Import to Thunderbird bombed about 3/4 of the way through. So I’m down to drag and drop a folder at a time. It’s awful.
I have probably 3,500pp of published PDFs from PowerPoint and another 2,000 from Word which I MUST maintain and update upon occasion. Those are published in pdf. The Master PDF Editor is the best I’ve found in Linux, but they aren’t up to the editorial needs I have. I have been in contact with their development people and they’re looking into how it is I accomplish revisions in 100pp+ PowerPoint files containing links on every page. In Acrobat it’s a simple swap of a “printed” file under the links of a whole chapter in one operation. I’m so sick of Adobe screwing me for 15yo software I’d already bought I’m ready to dive into the morass anyway.
LibreOffice Impress is just not there yet in terms of graphical quality. So far, it looks like LibreOffice Writer may be sufficient to replace Word (haven’t tested their footnoting). Nor does it record video. I have three 120pp PowerPoint presentations yet to record with the soundtrack from Audacity in Ubuntu to be integrated in Kdenlive. PowerPoint’s recording capability sucks, big time.
My understanding is various hardware parts leave similar tracking traces even with a fresh operating system.
I know most printers leave micro data that can be used to track anything printed back to a given printer. I was on a grand jury when this was exposed in detail. Same with copiers.
So if you leave a ransom note, go the newspaper word cut route and wear two sets of gloves, a hair net, and a mask.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.