This page says the following:
In the Windows registry is a key called MachineGUID that has a UUID which is created by Windows during installation and should
If a machine is restored from a backup or clone (such as in disaster-recovery, lab rollout, or fast VM deployment scenarios) then the MachineGuid
value would be the same on multiple machines.
I note that the key value itself is read/write, so a post-setup or userland application could overwrite this too, even to a duplicate non-unique value.