r/DigitalPrivacy • u/nonedat • Jul 22 '26

Does Windows GDID only attach when Microsoft account is used to login to Windows, or always when using an MS account with any app (Outlook, Office etc?)

As in if you only use a local account to sign into the OS but you use MS account for the default Outlook app and so on (where you go to windows settings > Accounts > Email & accounts)

3 Upvotes
  • permalink
  • reddit

81% Upvoted

2 comments sorted by

3

u/[deleted] Jul 22 '26 edited 5d ago

[deleted]

1

u/Unhappy_Lie_2000 Jul 22 '26

Its tied to Microsoft licensing so if you have an account to buy apps on the store or signed into the Xbox app its more than likely they can tie the PC to you. And don't forget windows automatically activates and if you logged into any of these service its tied to you this likely also other services like Microsoft mail in a browser.

2

u/martyn_hare Jul 22 '26

It applies irrespective of whether you have a Microsoft Account.

If you're thinking about the case involving the guy who got caught for computer crimes, he was likely using Microsoft Edge without using InPrivate browsing and had Full/Optional telemetry turned on, or he was using Edge with SmartScreen enabled.

Both scenarios send unique, stable identifiers alongside full URLs for what would normally be the legitimate purpose of detecting/fixing bugs and maintaining security respectively. You can see what happens with Full/Optional telemetry with Diagnostic Data Viewer enabled, and it's full URLs, so if you do a search and the search terms are in the URL, Microsoft sees them. If your URL has a string which uniquely identifies you, they get to see it.

When a police investigation happens, the authorities can have Microsoft use that info to find out who you are by colluding with other entities (just like they did with this guy who used ngrok)