i'm not surprised that cheaters are stupid and arrogant enough to think that the accessibility of hardware spoofing isn't public knowledge.
without being too intrusive, the current convention for tracking clients on windows operating systems is to log a majority of their security principal identifiers. outside of explicitly modifying the authentication procedure or creating a virtual loopback server to trick it, one of two methods can be used to bypass the ban:
1) repair install with new hardware (obfuscation of the logged SID's makes this a really inefficient approach. also, what may be logged during one installation might not be logged in another. eventually, you may cause more of your hardware SID's to be marked than needed.)
2) sysprep (using this to bypass security checks is not the tool's intended purpose. since it's made for enterprise clientele, not understanding its usage &/or not having the required OS/credentials to use it means that it'll remain obscure to most cheaters.)
although security through obscurity is not a steadfast defense against malicious users, stronger means of detection require deeper access to the OS (& potentially more access to personal information). this requires users to elevate permissions and/or disable security features, which makes gaming extremely inaccessible and induces liability onto both the game & the company behind it to keep your computer stable and to keep potential vulnerabilities closed. even assuming that your clients are complacent, most user accounts on non-professional OSes aren't setup to permit low level hardware identification anyway.