What steps can Windows users take to limit the tracking associated with the Global Device Identifier (GDID) that Microso

Tweak your Windows privacy settings

These are the quickest changes you can make right from the Settings app.

• Turn off optional diagnostic data under Privacy & security > Diagnostics & feedback [16].
• Disable personalized ads, tips, and launch tracking under Privacy & security > Recommendations & offers [17].
• Turn off Cloud Content Search so local searches don't silently ping Bing — find it under Privacy & security > Search [18].
• Review and switch off Activity History and any other telemetry options you aren’t comfortable with [19].

Use a local account instead of a Microsoft Account

GDID gets firmly attached to your Microsoft Account the moment you sign in [48][49]. A local account breaks that strong tie.

• Set up Windows with a local account during installation. Recent Windows 11 builds make that harder to spot, but the option is still there if you know where to look [15].
• If you ever reinstall Windows, avoid signing into the same Microsoft Account right away. Doing so lets Microsoft link the new identifier to your past activity [21].
• Keep expectations realistic: even a local account leaves a GDID value in the registry [14], so this move reduces association but doesn’t erase the identifier [25].

Stop the GDID from being sent out

The GDID travels through specific Windows services and telemetry. You can block those exits with scripts and registry edits.

• The community project “no-gdid” offers two PowerShell scripts: Disable-GDID-Services.ps1 and Block-GDID-Endpoints.ps1. They disable related services and cut off the endpoints that would transmit the GDID [22][23].
• The Delivery Optimization service (DoSvc) resists being turned off the normal way. You’ll need to edit the registry directly to disable it [24].

Block telemetry at your network edge

If your firewall or router can filter outgoing traffic, you can stop a lot of the data before it ever leaves your home.

• On Windows, a tool like SimpleWall with a whitelist approach blocks all connections except the ones you specifically allow, effectively silencing Windows telemetry [37].
• On your router (for example, a Ubiquiti device), you can use domain filtering to block known Microsoft telemetry domains [38].

When anonymity matters more than Windows

For journalists, activists, or anyone in a high‑risk situation, the telemetry built into Windows may simply be too dangerous to tolerate.

• Use a Linux live system or install Linux and route your traffic through Tor instead of relying on a commercial VPN with a Windows machine [20][26].

Microsoft confirmed that the GDID cannot be fully disabled [9], but these steps can dramatically shrink the trail it leaves.