Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Allow drag and drop or copy and paste files

This policy controls the `URLACTION_SHELL_MOVE_OR_COPY` URL security action (`0x00001802`) for sources assigned to the Internet zone.

since 0.9.8.11

Purpose

Show registry keys (2)
  • HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1802
  • HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1802

This policy controls the URLACTION_SHELL_MOVE_OR_COPY URL security action (0x00001802) for sources assigned to the Internet zone. It determines whether users may transfer files from such a source by dragging and dropping them or by copying and pasting them.

The 1802 registry value is a REG_DWORD with the following meanings:

  • 0: Allow the file transfer without prompting.
  • 1: Ask the user for confirmation before the file transfer.
  • 3: Prevent the file transfer.

The setting can be applied in the computer context under HKLM or in the user context under HKCU.

Notes

Security

Allowing the action without a prompt removes the security confirmation that would otherwise precede moving or copying files from the Internet zone. This increases the possibility that a user will inadvertently transfer an untrusted or malicious file to the local system or another application. A value of 1 leaves the decision to the user, while 3 blocks the affected transfer operations.

This policy does not give a website or script general access to files, bypass file-system permissions, or override other Windows security checks. It also does not by itself permit files to be downloaded or executed; separate URL security actions and policies govern those operations.

Possible side effects

With a value of 3, users cannot transfer files from Internet-zone sources by drag-and-drop or copy and paste. This can disrupt applications or workflows that rely on these transfer methods through Internet Explorer or components that use its security-zone model. A value of 1 can introduce additional confirmation prompts.

Notes

The value applies only to the Internet zone, identified by zone number 3. It is separate from the policy governing scripted clipboard operations and from the settings controlling file downloads or the launching of files.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowDragAndDropCopyAndPasteFiles

Microsoft Learn: URL Policy Flags

See also