Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Allow drag and drop or copy and paste files

This Internet Explorer policy controls whether users can drag files or copy and paste files from a source assigned to the **Restricted Sites** zone.

since 0.9.8.11

Purpose

Show registry keys (2)
  • HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1802
  • HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1802

This Internet Explorer policy controls whether users can drag files or copy and paste files from a source assigned to the Restricted Sites zone. Zone number 4 identifies that security zone, while value name 1802 represents file drag-and-drop and copy-and-paste operations.

When the selected policy option is Enable, these file transfers are allowed without confirmation. Prompt requires the user to approve the operation first. Disabling the policy prevents the affected file transfers. If the policy is not configured, Windows prompts the user before allowing the operation.

Notes

Security

Allowing the operation without a prompt reduces the isolation intended for Restricted Sites because users can transfer files from content in that zone to other locations. Those files may contain untrusted or malicious content. Whether a transferred file can subsequently be opened or executed still depends on other Windows protections, file permissions, and user actions.

This policy does not independently permit scripted clipboard access or ordinary file downloads; separate security settings govern those operations. It also does not give a website general permission to read or modify arbitrary local files.

Possible side effects

Blocking the operation can disrupt web applications or legacy Internet Explorer-based components whose workflows depend on dragging or copying files from a Restricted Sites source. The Prompt option preserves the operation but introduces a security confirmation for affected transfers.

Notes

This is an ADMX-backed policy defined by inetres.admx and can apply in either device or user scope. It affects sources in the Restricted Sites zone only; it is not a general Windows drag-and-drop or clipboard setting.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowDragAndDropCopyAndPasteFiles

Microsoft Learn: Internet Settings – Registry mapping for DragAndDropRestricted

See also