Windows-GDID-Changer: Change Global Device Identifier in Windows 10/11

The GDID (Global Device Identifier) became more widely known to the public after the official release of court documents by US authorities regarding the Scattered Spider cybergang. According to Microsoft representatives, the GDID is a persistent device-level identifier that is automatically generated to uniquely identify each Windows installation (on physical computers or virtual machines/VMs) across the company's various services.
This identifier remains stable even after operating system updates.

See more articles from iGuRu.gr when you search for news on Google.

iGuRu.gr preferred source

What is Windows-GDID-Changer?

Windows-GDID-Changer is a PowerShell script that forces Windows to restart the device registration process. By removing existing local sessions, it forces Microsoft servers to issue a brand new GDID for your installation, just like after a clean format and reinstall of Windows.

How is GDID generated by Microsoft?

The GDID registration and issuance process is performed automatically after installing Windows 10 or 11, even if the user is using a local account without logging in to a Microsoft Account:

• The system sends a registration request to https://live.com.
• The request contains encrypted information about your computer's hardware. This includes information about the motherboard, BIOS, manufacturer, system UUID, hard drive identifiers, and TPM security chip data.
• Microsoft servers process this data and return a GDID in hexadecimal format.
• Windows stores the identifier locally in the Registry, specifically in the path:
  Computer\HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\ExtendedProperties.LID.

How the Script works

The script runs the following actions:

• Deletes the device's locally stored credentials and session tokens.
• Triggers Windows Identity Services to request a new registration.
• It receives the new GDID from Microsoft and confirms the change by checking the Registry keys.
• The process requires an internet connection and takes approximately 30 to 90 seconds to complete. Although Microsoft can issue a new GDID for the exact same hardware, the script's creator recommends changing the hardware key identifiers (HWID Spoofing) before running, as the TPM data may help Microsoft associate the old with the new identity.

Important Safety Warnings

Signing out of Services: Removing local tokens means you may be automatically signed out of Microsoft services, such as the Microsoft Store, Xbox App, OneDrive, Microsoft 365 (Office), and Teams.

Managed & Corporate Environments: Do not use this script on computers that are connected to a corporate network (Domain-joined) or rely on Active Directory / Windows SSO, as it may cause serious malfunction in user authentication.

/ Home

https://github.com/gd03gd031/Windows-GDID-Changer/blob/main/gdid-regenerator.ps1

newsbot

Although the press releases will range from very select to rare, I said I'd pass...because sometimes the editors hide.