GDID is the persistent Windows ID that helped FBI trace a Scattered Spider hacker despite VPNs. Here's how it works and how to limit it.
  • Trainguyrom@reddthat.comEnglish
    0·
    5 days ago

    Yeah GDID works the same in a VM as it does on hardware. It’s actually easier to see in action on a VM:

    1. Create a Windows desktop VM
    2. Copy the VM
    3. Create a Window server VM and promote it to being an AD Domain in a new forest
    4. Try to join both copied VMs to the AD Domain. You can’t join the second one because the GDID is the same, and you’ll literally have to do a reset to get a new GDID for your VM

    This was the most annoying part of messing with AD in college was running through the windows setup repeatedly because that’s the only way to get more than one client VM for your virtual Windows network

    • Zwuzelmaus@feddit.orgEnglish
      1·
      5 days ago

      Create a Window server VM and promote it to being an AD Domain in a new forest4.Try to join both copied VMs to the AD Domai

      LOL I am very, very far away from knowing how to do such extremely windowsy things.