Security zone settings: prompt cut or copy in XP vs 2000

[terrahawk]

Hi, the directions below were working for me to prompt
users prior to them cutting or copying files from the
network in Windows 2000. I'm setting up an XP computer
now and followed the same steps, but do not receive the
propmt. In 2000, the prompt works if I set it up for
the "Intranet" (don't see My Computer).

Any advice would be appreciated.

Thanks,
Peter

http://www.jsiinc.com/SUBG/TIP3300/rh3394.htm

3394 How can I prevent users from performing a
copy/paste or drag-and-drop operation in Windows 2000
Explorer?

To prevent the subject action, you can implement security
zone settings for the My Computer zone. Once you implement
these restrictions, when a user attempts to copy/paste or
drag-and-drop, they will receive:
Security Alert

Your current security settings prohibit copying or moving
files from this zone.
To implement this policy, load either the Domain, OU, or
Local group policy into the MMC. The following example
will use the Local Computer Policy:
01. Start / Run / MMC / OK.
02. On the Console menu, press Add/Remove Snap-in.
03. Press Add.
04. In the Add Standalone Snap-ins window, select Group
Policy and press Add.
05. In the Group Policy Object, select Local Computer and
press Finish.
06. Press Close and OK.
07. Navigate through User Configuration / Windows
Settings / Internet Explorer Maintenance / Security.
08. Double-click Security Zones and Content Ratings.
09. Select the Import the current security zones settings
radial button and press the Modify Settings button.
10. In the Select a Web content zone to specify its
security settings section, select My Computer (note from
Peter, this is "Intranet Zone&quot.
11. Press the Custom Level button.
12. Scroll the Security Settings to Downloads and set File
download to Disable.
13. Scroll to Miscellaneous and set Drag and drop or copy
and paste files to Disable.
14. Press OK, OK, and OK.
15. Start / Run / secedit /refreshpolicy
user policy /enforce / OK.

 

[linney]

" 13. Scroll to Miscellaneous and set Drag and drop or copy and paste files to Disable. "


What if you set this to "Prompt"?


Specifies how you want to handle potentially risky actions, files, programs, or downloads. Select one of the following:

To be prompted for approval before proceeding, click Prompt.

To skip prompting and automatically refuse the action or download, click Disable.
To automatically proceed without prompting, click Enable.
Note: Also, these options do not apply to FTP folders.



315933 - How to Enable the My Computer Security Zone in Internet Options

http://support.microsoft.com/defaul...port/kb/articles/Q315/9/33.ASP&NoWebContent=1

 

[terrahawk]

Should have mentioned, yeah I do use the "prompt" setting. I don't want to prevent myself or others from moving files, just provide the prompt to make sure its not by accident.

But "prompt" does not seem to be working for me in XP when moving files around the shared drives.

 

[linney]

Maybe you've run into something like this?


"When a computer is a member of a Microsoft Windows 2000-based domain, and you apply the policy setting at any level above Local Policy, such as, organizational unit or domain as part of Group Policy, the organizational unit or Domain policy can override the Local Security policy and revert the settings back to the more restrictive mode. To prevent this behavior, authorized personnel can make the changes to the domain or organizational unit's Security Group policy."

284995 - Error Message: Your Current Security Settings Prohibit Copying or Moving Files from This Zone

http://support.microsoft.com/default.aspx?scid=kb;en-us;284995&FR=1&PA=1&SD=HSCH

Or maybe you just have a problem with IE on that one machine?

You can reinstall IE in Windows XP by clicking Start, Run and entering the following command:

rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 c:\windows\inf\ie.inf

You will need to have your XP CD available. If you re-install remember to update it.

Using SFC /Scannow at the command prompt will help in repairing IE.