PermitUSB documentation

PermitUSB is a USB device control platform for Windows endpoints. This site is the complete reference: how to install it, how to author policy, how it integrates with NIST 800-171, and the explicit list of what it does and doesn't do.

Start here

• Quickstart - sign up, install on a test machine, see your first event in under 10 minutes.
• Concepts - endpoints, groups, policies, rules, templates.
• Policy guide - match types, ordering, precedence, vendor-name match, device groups.

Deploy

• PowerShell install script - the recommended path for interactive installs, offline packages, and upgrades.
• MSI installer - direct msiexec usage for GPO, SCCM, and MDT workflows.
• Group Policy - common SMB deployment path.
• Microsoft Intune - for cloud-managed fleets.

Operate

• Tray app - what users see and what it tells them.
• Self-protection - service ACLs, the watchdog, and what happens when admins try to tamper.
• Stale-policy fail-closed - what happens when an agent loses cloud connectivity.

Comply

• NIST 800-171 mapping - direct control mapping you can hand an auditor.
• v1 scope - what's in v1, what's deferred, and why.

Something missing? Send a note. Documentation gaps get filled fast.