Large Network FileSystem - Need to DISABLE drag and drog in explorer.

Posted on 2007-10-12
Last Modified: 2012-06-27
I have a client with a very large file system.   One of the biggest issues we have is users dragging and dropping folders or files accidentally into places they don't belong.  These users do NEED to have permissions on these files so I can't limit them that way.   Is there any way to disable drag and drop through group policy, or a regfix script deployed through active directory.  

Windows 2003 SBS Domain with XP Pro clients.
Question by:zreisman
    LVL 14

    Expert Comment

    So you want the users to have read-only access to the filesystem?  Or are you asking how to get read/write, but only on files that already exist there?
    LVL 5

    Expert Comment

    1) RIGHT click on start button
    2) select Properties
    3) in "Taskbar and start menu properies" select the "Start Menu" Tab
    4) Select "Customize" (doesnt matter if you are using the classic or general style)
    5)Click on advance and scroll to search "Enable Drag and drop"
    6) Uncheck it
    7) Click Apply...

    Isolate the registry entry it creates and use a login script or GP to deploy.  You could use the "reg" command to do a reg add "HKCU\SOFTWARE\Microsoft\Windows NT\<DATA>" /v 00036601 /t REG_BINARY /d 84010000 /f (as an example of syntax)
    LVL 66

    Expert Comment

    Actually, if you use the special permissions on the cluster, but dont select Delete, I think that should cover dragging and dropping, as it involves a read, a copy and then a delete. Dont know feasible this is, depending on howgranular your security is....
    LVL 1

    Author Comment

    JohnDem - Unfortunately that only disables drag and drop for the start menu.  But yes, that is essentially the idea I was looking for only, I need it to disable drag and drop in explorer / my computer

    JohnB - I tried that originally, the problem is I don't want to actually restrict them from deleting / moving files.  Just to stop them from accidentally dragging directories into other directories thus causing havoc within the organization.
    LVL 14

    Accepted Solution

    To accomplish what you are trying, you're gonna have to get messy with the permissions.  You'd have to define a policy that gave read/write access to the directory, but not copy or delete permissions.  Then, you'd have to define a different policy for the files inside the directory that allow full control.

    A word of warning, though.  Defining custom permissions is very tricky.  Half the settings don't work as advertised.  I spend a few hours once trying to make a list for myself to know exactly what each thing did and what it depended on.  I gave up after a while of frustration, so I can't explain exactly what options you need to set/unset.  The few times when I have to define custom permissions, I just play around until I get something that works.  Then I promptly forget about it.
    LVL 1

    Expert Comment

    Forced accept.

    EE Admin

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    Learn about cloud computing and its benefits for small business owners.
    Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now