The features

User-based or computer-based device activation

• Whitelists for users and computers, all other devices are blocked
• AllUsers section for globally allowed devices (keyboards, mice, printers, ...)
• Easily allow entire classes of devices
• BadUSB protection

Temporary device activation

• Convenient, time-limited activation possible
• "Allow this USB stick for 2 hours"

Centralized management

• Clients receive their configuration from a central, protected network share
• Admin console for centralized administration
• Learn more about the unbeatable advantages of serverless installation

No server required

• Only two network shares needed
• Minimized maintenance effort

On-premises installation

• No cloud required
• No internet connection required

Standalone use possible

• From stand-alone to > 10,000 clients - in use thousands of times
• Small, separated networks can be managed cost-effectively

Customizable to any language

• Interaction with users adaptable to any language with a few simple steps
• Admin interface available in English and German

Read also why USBSecure is particularly suitable for the OT sector. For a full feature list please visit original USBSecure Enterprise website.

System requirements

The USBSecure Enterprise client operates as a Windows service on both Windows 10 and Windows 11 systems, ensuring continuous and reliable background protection. In addition, a dedicated Operational Technology (OT) edition is available, designed specifically for environments that rely on older or long-term supported operating systems. This OT version provides full compatibility with Windows 7, Windows 8 / 8.1, as well as Windows 10 and Windows 11, making it suitable for industrial or legacy systems where modernizing the platform is not always feasible.

FAQ

► How does USBSecure Enterprise work?

USBSecure Enterprise runs as a Windows service on Windows 10 / 11. Based on whitelists, USB devices (and other devices) are allowed or blocked per user or per device. The configuration files are centrally managed in a network share.

► Is it possible to distinguish between two identical devices, e.g. two iPhone 16 or two identical USB sticks?

Yes. It is possible to allow only a very specific device.

 
► What do I need to consider when I roll out USBSecure for the first time?

This is described in detail in our KnowledgeBase, see https://www.lugrain-software.com/products/usbsecure/knowledgebase.html. You can roll out USBSecure Enterprise initially in a "view only" mode without deactivating USB devices.

► Is USBSecure Enterprise suitable for OT environments?

Yes. Due to the high demand in the OT sector there is a special OT version available.

► How much does USBSecure Enterprise cost?

USBSecure Enterprise is not expensive. It is free of charge for 5 computers (max. 10 users).

Please take a look at the original USBSecure Enterprise price list.

► What's new in version 6.0 (Jan-2024)?

Some highlights of version 6.0: Remote devices (simplified activation), Thunderbolt support, inventory feature, ... Click here for the full What's new list.

Download

You can download USBSecure Enterprise here. The file size of the zip file is 3,1 MB.

Product	Version	Language	License key	Action
USBSecure Enterprise	6.0.0.86	english	included in download

...or you can download USBSecure Enterprise from the Lugrain Software manufacturer website.

Installation

Run Setup.exe for guided installation. Select "Standalone installation - all features on a single client" for an initial overview. This installation takes only 2 minutes and is fully removable from your computer with one click.

Screenshots

USBSecure Admin GUI		Restore of a previous version
Guided setup with stand-alone or network installation. An MSI package is available for the client.

 

Summary

USBSecure Enterprise is a powerful USB port security solution designed for Windows client environments. It helps organizations protect their infrastructure against unauthorized or potentially harmful USB devices by controlling access at the endpoint level. The software uses a whitelist-based approach to define which USB devices are allowed to connect to the system. Administrators can permit individual devices (based on unique identifiers) or entire categories of devices, such as storage media, input devices, or smartphones. These permissions can be assigned globally or tailored to specific Active Directory (AD) users, user groups, or individual host machines, providing maximum flexibility for enterprise environments.