A pen drive should not be able to walk out with your data.
USB Device Control keeps external drives, hard disks and phones switched off on every office PC. When someone needs one, they ask from their own screen and you approve a time window. It closes itself.
agent, portal and updates included
One port is all it takes
Your drawings, price lists, customer database and accounts all fit on a ₹300 pen drive. Most offices have no record of what left the building.
Copying is silent
Nothing on a normal Windows PC stops a drive, asks a question or leaves a trace. The file is gone before anyone notices.
Phones are drives too
A phone on a charging cable is storage. So is an external hard disk, an SD reader and a camera.
Blanket bans break work
Disabling ports in the BIOS stops the genuine job too, so someone hands out the password and the control quietly dies.
Four steps, and the office stays in control
No server to buy and no hardware to fit. The agent installs on the PC, the portal runs online.
Install
One PowerShell command on the PC installs a Windows service. It survives restarts and upgrades without losing its registration.
It registers itself
The PC appears on your dashboard on its own, with its name and a live heartbeat. Nothing to type in twice.
The user asks
Plug a drive in while blocked and a message appears on that screen. One click sends the request and rings your bell.
You approve a window
Give access from now until a time you choose. When the window ends the port closes again by itself.
Anyone can block a port. Making it stay blocked is the hard part.
These are the things we had to build after watching people try to get around it.
Re-checked every 10 seconds
The block is three separate Windows controls, re-applied on a timer. Edit a registry key by hand and it is put back, and the attempt is logged as a tamper event.
Already-plugged disks are ejected
Turning the block on does not wait for a reboot. Drives that are mounted at that moment are safely dismounted and ejected.
Runs on your clock, not theirs
Approval windows are judged against the server time carried on each heartbeat. Winding the PC clock forward does not extend anybody's access.
Keeps working offline
The approved window is cached on the machine, so it still opens and closes on time on a laptop with no internet. Pulling the network cable is not a way out.
Tied to the hardware
Each PC is fingerprinted by its boot disk and board. Move the disk into another machine and it stays blocked until you accept the new hardware on the portal.
The user never holds the key
The access token lives with the Windows service and is encrypted to that machine. A logged-in user, even a local admin, has nothing to copy or replay.
How this differs from switching the ports off
There are cheaper ways to block a USB port. Here is honestly what each one does and does not give you.
| What you need | Disable ports in BIOS | Windows Group Policy | Enterprise DLP suite | USB Device Control |
|---|---|---|---|---|
| Blocks pen drives and hard disks | Yes | Yes | Yes | Yes |
| Keyboard, mouse and printer keep working | No, the port is dead | Yes | Yes | Yes |
| Works without an Active Directory domain | Yes | No, needs a domain | Usually needs one | Yes |
| Staff can request access themselves | No | No | Sometimes, by ticket | Yes, from their own screen |
| Access that expires on its own | No, someone must undo it | No | Varies by product | Yes, a from-to window |
| Holds against a local administrator | No, the BIOS password gets shared | Only while domain-joined | Yes | Yes, re-applied every 10s and logged |
| Runs on Windows 7 machines | Yes | Yes | Rarely supported | Yes, Windows 7 SP1 and later |
| Typical cost | Free | Free with a domain | High, per seat per year | ₹200 per PC / month |
If you already run a domain and only need a blanket ban, Group Policy is free and you should use it. The reason to pay for this is the request-and-approve loop: work carries on without the office handing out a password it can never take back.
Built for offices without an IT department
Most of our customers have between 5 and 200 PCs and nobody whose full-time job is security.
Manufacturers
Drawings, tooling files and rate lists sit on the same PCs that vendors and contract staff walk past.
Trading and distribution
The customer list and the price list are the business. A leaving salesman should not take them along.
Accounts departments
Books, payroll and bank files on machines that several people use through the day.
Design studios
Artwork and source files that are worth exactly as much to a competitor as they are to you.
Website control on the same agent
The same service can hold a per-PC website policy, so the machine that is locked down for data is locked down for distraction too.
-
Block a list, or allow only a listEnforced in Chrome, Edge and Firefox by policy, with encrypted DNS switched off so the block cannot be routed around.
-
Requests come to youA bell on the portal tells you a machine is waiting. Approve it in two clicks from anywhere.
-
Runs on the PCs you already haveWindows 7 SP1 and newer, including the older machines still doing real work on a shop floor.
See it block a pen drive on your own PC
Words on a page prove nothing. We install on two of your machines, free, and you watch the whole loop work before paying anything.
-
Day 1: install on two PCsA remote session and one PowerShell command per machine. About ten minutes in total.
-
You try to break itPlug drives in, change the clock, pull the network cable, edit the registry. See what gets logged.
-
Roll out, or walk awayIf it does the job, we install the rest. If not, we uninstall cleanly and you owe nothing.
Start a free two-PC pilot
Tell us how many PCs you have. We reply within one working day to fix a time for the install.
Frequently asked questions
How do I block USB drives on office computers?
Install the USB Device Control agent on each PC with a single PowerShell command. From that moment USB storage is blocked on that machine, and the PC appears on your web portal where you can grant timed access when somebody genuinely needs it. No domain, server or extra hardware is required.
How much does USB blocking software cost in India?
USB Device Control from Sense Softech is ₹200 per PC per month, which includes the Windows agent, the admin portal, unlimited access requests, updates and support. Enterprise data-loss-prevention suites usually cost several times that per seat and are sold per year.
Can a user with admin rights on the PC turn it off?
They can try. The block is three separate Windows controls re-applied every ten seconds, so a manual change is reverted and recorded as a tamper event on your dashboard with the machine name and time. The access token is held by the Windows service and encrypted to that machine, so there is nothing for a logged-in user to copy.
Can I allow a USB drive for one person temporarily?
Yes, that is the main reason people buy it. The user plugs the drive in, a message appears on their screen, and one click sends you a request. You grant a from-to window, for example two hours, and access closes by itself when the window ends. Nobody has to remember to switch it back off.
What happens when the PC has no internet?
It carries on working. The approved window is cached on the machine, so access still opens and closes at the correct time offline, and the decision is judged on server time carried by each heartbeat rather than the PC clock. The machine syncs its history the next time it reaches the portal.
Does it block the keyboard, mouse and printer as well?
No. Only storage is blocked: pen drives, external hard disks, mobile phones, SD card readers and CD or floppy drives. Keyboards, mice, printers, scanners, webcams and licence dongles keep working normally.
Does it block mobile phones plugged in for charging?
A phone connected by cable presents itself as storage, so it is blocked like any other drive. The phone still charges; it just cannot be browsed or copied to.
Which versions of Windows are supported?
Windows 7 SP1 and newer, including Windows 10 and 11. That matters in factories and shops where older machines are still doing real work and most modern security products have dropped support.
Is this data loss prevention (DLP) software?
It covers the removable-media part of data loss prevention, which is where most small-business leaks actually happen, and it adds a website block list on the same agent. It does not inspect email or cloud uploads, so it is a focused and much cheaper alternative to a full DLP suite rather than a replacement for one.
How long does installation take?
A couple of minutes per PC. It is one PowerShell command and the machine registers itself on your portal straight away, with its name and a live heartbeat, so there is nothing to type in twice.
Can I try it before buying?
Yes. We install on two machines first so you can watch a drive get blocked, send a request from the user's screen and approve a window from the portal before you roll it out to the rest of the office.
Lock the ports this week, not next quarter.
Send us the number of PCs. We will install on two machines first so you can watch it block, ask and approve before you roll it out.