Quickstart

Goal: get a PermitUSB agent enrolled and reporting events from a test Windows machine in under ten minutes. You should already have an account; if not, start a free trial first.

1. Sign in to the dashboard

On /login, sign in with your email and password. New tenants are seeded with a sensible default policy on first signin so you start with working enforcement - allows common peripherals (printers, audio, webcams, hubs, smart card readers); blocks USB mass storage. Customize it on the Policy page.

2. Get the installer

On Agent releases, download Install-PermitUSB.ps1. It checks prerequisites, installs the .NET Desktop Runtime if the machine needs it, fetches the MSI and runs the install - so it is the shortest path on a machine you are setting up by hand. The bare MSI is there too, for Group Policy, Intune or imaging. Both are gated to signed-in users; anonymous traffic cannot pull the binaries.

3. Generate a token and install

On the Enrollment page, generate a token - single-use enrolls exactly one endpoint, reusable enrolls many. The page then shows the exact install command with your token already filled in.

Copy that command to a Windows 10/11 test machine and run it in PowerShell as Administrator. The service installs, the agent enrolls, and within ~30 seconds the endpoint appears on the dashboard's Endpoints page.

4. Plug in a USB device

Plug a thumb drive into the test machine. Within a couple of seconds you should see:

  • An event row on the dashboard's Events page
  • A toast notification from the tray app on the test machine
  • The drive blocked (if your policy says block) or allowed (if your policy says allow)

That's the end-to-end loop. From here you can: edit policy, add rules for specific serials, organize endpoints into groups, invite teammates, or set up alerts.

What's next