Quickstart

Goal: get a PermitUSB agent enrolled and reporting events from a test Windows machine in under ten minutes. You should already have an account; if not, start a free trial first.

1. Sign in to the dashboard

On /login, sign in with your email and password. First-time users land on the welcome wizard automatically.

2. Pick a starter template

The welcome wizard offers three templates. Standard Office is the safe default — allows printers, audio, video, and security keys; blocks USB mass storage. Apply it.

Templates aren't permanent. You can edit individual rules, swap in a different template, or build a policy from scratch on the Policies page.

3. Download the installer + generate a token

Step three of the wizard takes you to the Enrollment page. Two things happen here:

  1. Click Download PermitUSB.msi to save the installer locally (it's gated to authenticated users — anonymous traffic can't pull the binary).
  2. Generate a single-use token valid for seven days. The page shows the exact msiexec command to paste on the target machine with your token already filled in.

4. Run on a Windows test machine

Copy PermitUSB.msi to a Windows 10/11 test machine, open PowerShell as Administrator in the same folder, and run the command shown on the Enrollment page (something like msiexec /i PermitUSB.msi /qn TENANT_TOKEN="<token>"). The service installs, the agent enrolls, and within ~30 seconds the endpoint appears on the dashboard's Endpoints page.

5. Plug in a USB device

Plug a thumb drive into the test machine. Within a couple of seconds you should see:

  • An event row on the dashboard's Events page
  • A toast notification from the tray app on the test machine
  • The drive blocked (if your policy says block) or allowed (if your policy says allow)

That's the end-to-end loop. From here you can: edit policy, add rules for specific serials, organise endpoints into groups, invite teammates, or set up alerts.

What's next

Quickstart — PermitUSB docs