一个技术研究项目发布了名为degdid.ps1的PowerShell工具，用于删除Windows系统中的微软全局设备标识符（GDID）实例并阻止新GDID的生成[1]。该工具通过主机文件阻止和防火墙规则在支持的Windows环境上实现隐私保护，在实验室环境中的保护状态可维持超过33小时[1]。
GDID是微软DeviceAdd基础设施分配的64位设备标识符，即使使用本地账户也无法阻止其生成[1]。根据2026年法庭记录，微软曾持有过GDID与URL、时间和IP地址关联的数据[1]。该工具支持Windows 10 22H2/build 19045或Windows 11 build 22000及更新版本[1]，其中Windows 11 25H2/build 26200为完整验证版本，已通过包括超过18小时MSA连接字段运行的生命周期测试[1]。
degdid.ps1提供了多项命令功能[1]：Status命令检查当前保护状态，Protect命令应用保护措施（包括应用双栈主机阻止、检查DeviceAdd路径、刷新防火墙规则、清除已知GDID副本），Unblock命令则移除网络控制[1]。不过该工具存在已知限制，阻止login.live.com、account.live.com等路径可能会破坏微软账户登录、Microsoft Store和Xbox认证、OneDrive以及Phone Link等功能[1]。
A technical research project has released degdid.ps1, a hardening tool designed to delete existing instances of Microsoft's Global Device Identifier (GDID) from Windows systems and prevent the generation of new ones [1]. GDID is a 64-bit device identifier allocated by Microsoft's DeviceAdd infrastructure that generates automatically even on local accounts [1].
The tool employs host file blocking and firewall rules to protect device privacy across supported Windows environments, with Windows 11 25H2 (build 26200) serving as the fully validated version [1]. According to court records from 2026, Microsoft has maintained data associating GDIDs with URLs, timestamps, and IP addresses [1]. The protection mechanism includes applying dual-stack host blocks, checking DeviceAdd paths, refreshing firewall rules, and clearing known GDID copies [1]. Laboratory testing on Windows 11 25H2 (build 26200) demonstrated the tool maintained protection status for over 33 hours, including more than 18 hours of Microsoft Account connection field operation [1].
The tool supports Windows 10 22H2 (build 19045) and Windows 11 build 22000 and newer versions, with command options including -Status to check protection status, -Protect to apply safeguards, and -Unblock to remove network controls [1]. However, blocking paths such as login.live.com and account.live.com may disrupt Microsoft Account authentication, Microsoft Store and Xbox authentication, OneDrive functionality, and Phone Link services [1].