Quickstart

Goal: get a PermitUSB agent enrolled and reporting events from a test Windows machine in under ten minutes. You should already have an account; if not, start a free trial first.

1. Sign in to the dashboard

On /login, sign in with your email and password. New tenants are seeded with the Standard Office template on first signin so you start with a working default policy — allows printers, audio, video, and security keys; blocks USB mass storage. Customize on the Policies page if you want a different starting point or switch to Engineering / Kiosk templates.

2. Download the installer + generate a token

Visit the Enrollment page. Two things happen here:

  1. Click Download PermitUSB.msi to save the installer locally (it's gated to authenticated users — anonymous traffic can't pull the binary).
  2. Generate a single-use token valid for seven days. The page shows the exact msiexec command to paste on the target machine with your token already filled in.

3. Run on a Windows test machine

Copy PermitUSB.msi to a Windows 10/11 test machine, open PowerShell as Administrator in the same folder, and run the command shown on the Enrollment page (something like msiexec /i PermitUSB.msi /qn TENANT_TOKEN="<token>"). The service installs, the agent enrolls, and within ~30 seconds the endpoint appears on the dashboard's Endpoints page.

4. Plug in a USB device

Plug a thumb drive into the test machine. Within a couple of seconds you should see:

  • An event row on the dashboard's Events page
  • A toast notification from the tray app on the test machine
  • The drive blocked (if your policy says block) or allowed (if your policy says allow)

That's the end-to-end loop. From here you can: edit policy, add rules for specific serials, organize endpoints into groups, invite teammates, or set up alerts.

What's next

Quickstart — PermitUSB docs