There is a shell extension interface ICopyHook which gets called when there is copy / rename / delete operation on the FOLDERS (and PRINTERS). By implementing this interface you could deny / allow these
operations on the file system thru Shell (Explorer or Common dialog boxes ).
I would like to do the same for the FILES too. I didn't find anything in the Shell extension though. How to do this with any other apporach ? Want to do this in the User space.