Microsoft Windows Archives

Winsage

July 21, 2026

Persistent Telemetry: Permanent Microsoft Windows Identifier

Discussions about consumer privacy in the Windows ecosystem have focused on optional diagnostic settings and telemetry controls. Recently, the Global Device Identifier (GDID), a permanent device-level token embedded in the Windows operating system, was revealed in a U.S. Department of Justice complaint related to a cybercriminal investigation. The GDID uniquely identifies a Windows installation and is used by Microsoft services. It is generated when a device is linked to a Microsoft account and resides in the Windows registry, being included in data sent to remote servers. There is no option to disable or delete the GDID, and attempts to do so can disrupt essential features. This has led privacy-conscious users to consider alternatives like Linux, which offers more control over data and does not require persistent identifiers. For Windows users, strategies to minimize data linked to the GDID include using local accounts, disabling optional diagnostics, and reviewing cloud app sync settings. Privacy advocates are calling for better user controls and opt-out mechanisms for hardware tracking tokens.

Winsage

July 18, 2026

Windows 11 Secure Boot certificates have expired, and Microsoft says what to do next

Microsoft held its OEM Secure Boot Office Hours event on July 15, where engineers collaborated with OEM representatives from companies like Acer, Asus, Cisco, Dell, and HP. IT administrators were able to ask live questions about the Secure Boot 2023 rollout. The discussion thread became a detailed technical record, especially following the expiration of the first certificates three weeks prior. Concerns raised by IT admins included BitLocker recovery loops, stuck confidence ratings, and unhelpful Intune error codes. Key facts include: - Devices offline for long periods will still receive the 2023 certificates upon reconnecting to Windows Update. - Devices with existing 2023 certificates in firmware will switch to the new boot manager after the latest Windows patches are installed. - A new script, Detect-SecureBootCertUpdateStatus.ps1, is available in Windows for checking certificate status. - BIOS updates may reset a device’s confidence rating to unrated, which is normal and does not indicate certificate failure. - Admins should edit the AvailableUpdates registry key, not the AvailableUpdatesPolicy, which is managed by Intune and Group Policy. - A licensing bug affecting AvailableUpdatesPolicy on devices upgraded from Pro to Enterprise was resolved by Microsoft in 2026. - BitLocker recovery is not typically linked to the certificate update process but may relate to firmware or PCR issues. - Dell and HP provided guidance on which BIOS versions include the 2023 certificates for their newer models. - Older HP EliteBook 840 G5 units require a manual update package for the new certificates. - Eligible devices can still receive the 2023 certificates in the future, and Surface devices released from 2024 onward come pre-equipped with them. - Microsoft confirmed that devices running 2011 certificates will not lose the ability to receive the 2023 chain. - The Microsoft Corporation KEK CA 2011 and Microsoft UEFI CA 2011 certificates have expired, with the Microsoft Windows Production PCA 2011 set to expire on October 19, 2026.

Winsage

July 14, 2026

Run Windows-only apps on your Mac with Windows 11 Pro for $9.97

Microsoft Windows 11 Pro is available for .97, reduced from its regular price of 9. This offer allows Mac users to run Windows-only applications through virtualization software or Boot Camp, and it ends on July 16 at 11:59 p.m. PT. Windows 11 Pro includes features like BitLocker drive encryption, Remote Desktop, virtual desktops, and Snap Layouts, and it eliminates recurring subscription fees.

Winsage

July 14, 2026

Windows 11 Pro is under $10 until July 16

Microsoft Windows 11 Pro is currently available for .97, reduced from its regular price of 9. This limited-time offer expires on July 16 at 11:59 p.m. PT. Windows 11 Pro includes features such as BitLocker for data encryption, Remote Desktop for accessing work PCs, Hyper-V for creating virtual machines, and Windows Sandbox for safely testing software. The Pro edition has received a 4/5 rating from PC Magazine and TechRadar.

Winsage

July 13, 2026

Windows 11’s smallest upgrade shows a big commitment from Microsoft

Windows 11 is set to receive an update that includes a slightly taller search box in the Start menu, increasing its height by four pixels. This change, currently in preview, is part of Microsoft's Windows K2 initiative aimed at improving user experience by addressing inconsistencies in the operating system. The update was revealed in the release notes for a preview build, leading to humorous reactions from users. Despite the minor nature of this adjustment, it highlights ongoing design issues within Windows 11, such as misaligned windows and inconsistent menus, which contribute to a perception of incompleteness. Additionally, the context menus in the latest preview build feature more rounded corners, raising questions about UI consistency. The Windows K2 initiative aims to enhance both performance and visual appeal, improving the overall user experience.

Winsage

July 8, 2026

Arrest and extradition of Scattered Spider hacker shines light on how Windows telemetry GDIDs can identify and track users — Microsoft device identifier is just one digital fingerprint in a software world rife with them

Peter Stokes, a 19-year-old from Estonia, was arrested and extradited to the United States on charges related to digital crimes, with the FBI using telemetry logs from Microsoft Windows to trace his online activities. These logs included his Global Device Identifier (GDID) and records of websites he visited. Stokes likely had his telemetry settings configured to Optional/Full, which allowed the transmission of URL data. The FBI connected Stokes to his ngrok account and linked his travel records to a New York IP address and a rental at the Empire Hotel, aided by photos he shared. Google and Apple assisted in the investigation by tracing Stokes' phishing phone number back to the same IP address used for his ngrok account. Stokes attempted to obscure his digital footprint using a VPN and other services, but modern digital identification methods made it difficult to remain anonymous.

Winsage

July 7, 2026

Microsoft Windows telemetry identified hacker despite VPN use

Microsoft's telemetry capabilities helped identify Peter Stokes, a 19-year-old suspected member of the Scattered Spider hacking group, despite his use of a VPN. The investigation revealed a significant cybersecurity breach in May 2025 at a luxury jewelry retailer, leading to the theft of approximately 77 GB of sensitive data and a ransom demand. Investigators linked Stokes to the breach through a Global Device Identifier (GDID) associated with a Windows device that created an ngrok account used in the attack. This device accessed various online platforms and shared IP addresses with Stokes' accounts on Apple, Snapchat, and Facebook, corroborated by travel records and social media posts. The evidence included server logs from Scattered Spider's infrastructure and records from ngrok and other providers.

Winsage

July 5, 2026

Windows 11 Pro has entered “too good to ignore” territory at just $10.49 through today only

Microsoft Windows 11 Pro is available for .49 (regular price 9) through today only. This is a lifetime license with no recurring subscription fees. Key features include BitLocker, Hyper-V, Windows Sandbox, Azure AD support, Snap Layouts, DirectX 12 Ultimate, biometric sign-in, and an AI Assistant Copilot. The offer ends today at 11:59 p.m. PT using the code JULY30.

Winsage

July 1, 2026

🚨 Windows users, don’t let a $9.97 Pro upgrade pass you by

Microsoft Windows 11 Pro is available for .97, down from 9, as part of the Extended Deal Days event, valid until 11:59 p.m. PT today. Key features include BitLocker, Hyper-V, Windows Sandbox, and Azure AD Support. User experience enhancements include Snap Layouts, Copilot, DirectX 12 Ultimate, and Biometric Sign-In. The purchase is a one-time fee, and users should verify compatibility with Microsoft's PC Health Check app.

Winsage

June 29, 2026

OEMs reveal Windows 11 Secure Boot fix after deadline passes, here’s how to update your PC

Major PC manufacturers, including HP, Dell, ASUS, Lenovo, MSI, Acer, Samsung, LG, and Microsoft’s Surface division, have provided guidance on transitioning to new Secure Boot certificates as the expiration of Microsoft’s 2011 certificates approaches. The expiration will occur in three phases: Microsoft Corporation KEK CA 2011 expired on June 24, 2026; Microsoft UEFI CA 2011 expired on June 27, 2026; and Microsoft Windows Production PCA 2011 is set to expire on October 19, 2026. Microsoft has begun rolling out replacement certificates through Windows Update, contingent on OEMs providing compatible BIOS updates. ASUS offers detailed documentation for both consumer and commercial devices, confirming that most users will receive updates automatically. Lenovo provides direct download links for BIOS updates organized by product family and specifies which products will not receive updates. Dell's support article covers its entire product lineup, noting that devices with an End of Service Life before January 1, 2026, will not receive updates. HP outlines a dual-track approach for updates, with specific timelines for commercial PCs. Microsoft's Surface devices receive updates directly from Microsoft, while MSI categorizes guidance based on processor generation for its laptops. Acer emphasizes backing up the BitLocker recovery key and provides a model table for confirmed BIOS release dates. Samsung confirms that all PCs running Windows 10 or 11 will function normally post-expiration, but security updates will cease. LG has released a guide for checking BIOS updates for its PCs. To verify if a PC has the 2023 certificates, users can check the Secure Boot section in Windows Security. A green checkmark indicates successful application, while yellow or red icons indicate pending updates or incompatibility. Microsoft has pushed the certificates to all eligible devices as of June 2026.