# Is It Possible To Make An External Drive "Copy Only"

**URL:** <https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043>\
**Category:** Factual Questions\
**Created:** [August 7, 2014, 4:48pm UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043 "2014-08-07T16:48:09Z")\
**Posts on this page:** 18\
**Page:** 1

<div class="post-metadata">

**Author:** ![Carryon](https://avatars.discourse-cdn.com/v4/letter/c/9fc29f/32.png) [@Carryon](https://boards.straightdope.com/u/Carryon)\
**Post date:** [August 7, 2014, 4:48pm UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/1 "2014-08-07T16:48:09Z")

</div>

Here’s my problem:

Where I work we make some short movies and use photos. The clients and people we serve are encouraged to take a copy of these home for their future use.

They’re training program type vids and such.

Here’s what is happening. I put these files on an external hard drive. So all the people have to do is go on the computer and click the file, drag it to their flash drive and select copy.

For some reason about half keep selecting “move,” even though the instructions clearly say “select copy not move.”

It’s not a big problem in of itself, as I can simply put the files removed back on the external drive from the original source.

So that leaves me having to pull an employee to do it for the clients.

But is there a way to designate this hard drive so no one can move from it. Only copy a file from it.?

I have Windows 7 ultimate.

Thanks

---

<div class="post-metadata">

**Author:** ![gnoitall](https://avatars.discourse-cdn.com/v4/letter/g/bb73d2/32.png) [@gnoitall](https://boards.straightdope.com/u/gnoitall)\
**Post date:** [August 7, 2014, 4:55pm UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/2 "2014-08-07T16:55:49Z")

</div>

> [@Carryon](#):
>
> Here’s my problem:
> 
> Where I work we make some short movies and use photos. The clients and people we serve are encouraged to take a copy of these home for their future use.
> 
> They’re training program type vids and such.
> 
> Here’s what is happening. I put these files on an external hard drive. So all the people have to do is go on the computer and click the file, drag it to their flash drive and select copy.
> 
> For some reason about half keep selecting “move,” even though the instructions clearly say “select copy not move.”
> 
> It’s not a big problem in of itself, as I can simply put the files removed back on the external drive from the original source.
> 
> So that leaves me having to pull an employee to do it for the clients.
> 
> But is there a way to designate this hard drive so no one can move from it. Only copy a file from it.?
> 
> I have Windows 7 ultimate.
> 
> Thanks

Mark the files and directories as “read-only”. To move a file, the computer actually does a copy, and then deletes the original. Making the original file and directory structure read-only prevents the deletion, which is a write operation.

If the whole device is supposed to be read-only, some devices have a physical toggle switch someplace that makes the entire device read-only. Flip that switch and no one will be deleting (or altering) anything stored on that device.

---

<div class="post-metadata">

**Author:** ![dstarfire](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dstarfire/32/5762_2.png) [@dstarfire](https://boards.straightdope.com/u/dstarfire)\
**Post date:** [August 7, 2014, 8:19pm UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/3 "2014-08-07T20:19:13Z")

</div>

Alternatively, if the drive if formatted as NTFS (very likely, unless it’s been in use since the win '98 days) you can modify the drives security settings to deny the ‘write’ (or ‘modify’, depending on which interface you’re using) permission to the group ‘everyone’.

---

<div class="post-metadata">

**Author:** ![andrewm](https://avatars.discourse-cdn.com/v4/letter/a/c57346/32.png) [@andrewm](https://boards.straightdope.com/u/andrewm)\
**Post date:** [August 7, 2014, 10:08pm UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/4 "2014-08-07T22:08:30Z")

</div>

> [@dstarfire](#):
>
> Alternatively, if the drive if formatted as NTFS (very likely, unless it’s been in use since the win '98 days) you can modify the drives security settings to deny the ‘write’ (or ‘modify’, depending on which interface you’re using) permission to the group ‘everyone’.

Do not waste your time trying this. Two reasons:

1. NTFS on a removable drive is likely to get corrupt
2. Unless everyone is on the same Windows domain, SIDs on every machine will be different and no one will be able to do anything to the files, including copy them.

There do exist write-blocking USB enclosures that will allow the computer to only read from the device (and not write), but you may find that buying one is more expensive than spending the time to occasionally put the correct content back on the drive.

---

<div class="post-metadata">

**Author:** ![wolfpup](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/wolfpup/32/10618_2.png) [@wolfpup](https://boards.straightdope.com/u/wolfpup)\
**Post date:** [August 7, 2014, 10:27pm UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/5 "2014-08-07T22:27:44Z")

</div>

> [@andrewm](#):
>
> Do not waste your time trying this. Two reasons:
> 
> 1. NTFS on a removable drive is likely to get corrupt
> 2. Unless everyone is on the same Windows domain, SIDs on every machine will be different and no one will be able to do anything to the files, including copy them.

Regarding #2: I read the OP as saying everyone will be accessing the USB drive from the same physical computer. And even network access would be through a straightforward local proxy account. What would even suggest a cross-domain topology in the OP question?

Regarding #1: Absolute and utter bullshit.

---

<div class="post-metadata">

**Author:** ![wolfpup](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/wolfpup/32/10618_2.png) [@wolfpup](https://boards.straightdope.com/u/wolfpup)\
**Post date:** [August 7, 2014, 10:45pm UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/6 "2014-08-07T22:45:16Z")

</div>

Ah, I think **andrwem** was referring to the situation of possibly carrying the external drive around from one computer to another, in which case of course SIDs would be different even for the same account names and problems would result. The OP is ambiguous as to what “_ **the** _ computer” means – one particular computer, or is the external going to hauled around to many different computers?

In any case, NTFS protection would still work simply by providing read access to “everyone” and write/modify access only to a specific SID.

And point #1, again, is absolute and utter bullshit.

---

<div class="post-metadata">

**Author:** ![gotpasswords](https://avatars.discourse-cdn.com/v4/letter/g/c57346/32.png) [@gotpasswords](https://boards.straightdope.com/u/gotpasswords)\
**Post date:** [August 7, 2014, 11:08pm UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/7 "2014-08-07T23:08:37Z")

</div>

Why mess with external drives? Just give clients the files on CD-R or DVD-R discs and be done with it.

---

<div class="post-metadata">

**Author:** ![pulykamell](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pulykamell/32/3166_2.png) [@pulykamell](https://boards.straightdope.com/u/pulykamell)\
**Post date:** [August 7, 2014, 11:58pm UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/8 "2014-08-07T23:58:29Z")

</div>

> [@gotpasswords](#):
>
> Why mess with external drives? Just give clients the files on CD-R or DVD-R discs and be done with it.

Optical drives are kind of going the way of the dodo. I’ve stopped giving clients files on DVD because I’ve found not everyone has DVD drives anymore. (Right now, it’s USB sticks.) And CD–I can’t remember the last time I’ve burned files on a CD.

---

<div class="post-metadata">

**Author:** ![Hail\_Ants](https://avatars.discourse-cdn.com/v4/letter/h/dc4da7/32.png) [@Hail\_Ants](https://boards.straightdope.com/u/Hail_Ants)\
**Post date:** [August 8, 2014, 4:39am UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/9 "2014-08-08T04:39:27Z")

</div>

I don’t want to deny the OP’s problem, but it kind of doesn’t make sense. When you drag & drop a file to a new location but\* on the same drive \*Windows’ default action is move, but if it’s _on two separate drives_ the default action is always copy. So unless the clients are holding down the SHIFT key while dragging & dropping (which changes it to move) it shouldn’t be happening. As long as you only drag & drop with the mouse, **DO NOT** right click, that will give you the option to cut or copy…

---

<div class="post-metadata">

**Author:** ![JohnClay](https://avatars.discourse-cdn.com/v4/letter/j/c37758/32.png) [@JohnClay](https://boards.straightdope.com/u/JohnClay)\
**Post date:** [August 8, 2014, 4:47am UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/10 "2014-08-08T04:47:32Z")

</div>

If you had a Mac though and you plugged in a Windows hard-drive I think it is always read-only.

---

<div class="post-metadata">

**Author:** ![buddha\_david](https://avatars.discourse-cdn.com/v4/letter/b/ee7513/32.png) [@buddha\_david](https://boards.straightdope.com/u/buddha_david)\
**Post date:** [August 8, 2014, 10:51am UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/11 "2014-08-08T10:51:51Z")

</div>

> [@Hail\_Ants](#):
>
> I don’t want to deny the OP’s problem, but it kind of doesn’t make sense. When you drag & drop a file to a new location but\* on the same drive \*Windows’ default action is move, but if it’s _on two separate drives_ the default action is always copy. So unless the clients are holding down the SHIFT key while dragging & dropping (which changes it to move) it shouldn’t be happening.

Never underestimate the power of PEBKAC.

Flagging the files as “read-only” sounds like the cheapest and easiest solution; however, all that actually does is provide a dialogue box asking to confirm the deletion, which the OP’s brain-dead clients will probably end up clicking anyway. :smack:

---

<div class="post-metadata">

**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\
**Post date:** [August 8, 2014, 12:32pm UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/12 "2014-08-08T12:32:33Z")

</div>

You could give them the files on an SD card - superglue the write protect switch in the ‘lock’ position after writing the files.

---

<div class="post-metadata">

**Author:** ![wolfpup](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/wolfpup/32/10618_2.png) [@wolfpup](https://boards.straightdope.com/u/wolfpup)\
**Post date:** [August 8, 2014, 12:56pm UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/13 "2014-08-08T12:56:15Z")

</div>

> [@buddha\_david](#):
>
> Flagging the files as “read-only” sounds like the cheapest and easiest solution; however, all that actually does is provide a dialogue box asking to confirm the deletion, which the OP’s brain-dead clients will probably end up clicking anyway.

No, he’s not saying to flag them as read-only, he’s saying to grant **NTFS read-only permissions** to the user group the brain-dead clients will be using. Attempting to do a “move” (or “delete”) will just pop up “access denied”.

ETA: Of course the brain-dead clients trying to do a “move” will then start complaining that they don’t have access to the file! 😃

---

<div class="post-metadata">

**Author:** ![watchwolf49](https://avatars.discourse-cdn.com/v4/letter/w/e9c0ed/32.png) [@watchwolf49](https://boards.straightdope.com/u/watchwolf49)\
**Post date:** [August 8, 2014, 1:08pm UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/14 "2014-08-08T13:08:39Z")

</div>

Set global permissions to “read only” … rwxrwxr–

---

<div class="post-metadata">

**Author:** ![Reply](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/reply/32/15952_2.png) [@Reply](https://boards.straightdope.com/u/Reply)\
**Post date:** [August 8, 2014, 5:52pm UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/15 "2014-08-08T17:52:55Z")

</div>

Permissions are meaningless and can be reset by anyone with admin privileges on another computer, no?

If I were you I’d make an actual installer (using [NSIS](http://nsis.sourceforge.net/Main_Page)) and an autorun.inf that launches it on insertion. If any of your clients are on Macs, they might need something different.

And wouldn’t it be easier to put the stuff online on a private page/private YouTube channel anyway?

---

<div class="post-metadata">

**Author:** ![Carlarm](https://avatars.discourse-cdn.com/v4/letter/c/b5e925/32.png) [@Carlarm](https://boards.straightdope.com/u/Carlarm)\
**Post date:** [August 8, 2014, 6:27pm UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/16 "2014-08-08T18:27:17Z")

</div>

Put your files on a DVD or CD and let people copy from that to their flash drive.

---

<div class="post-metadata">

**Author:** ![Critical1](https://avatars.discourse-cdn.com/v4/letter/c/3e96dc/32.png) [@Critical1](https://boards.straightdope.com/u/Critical1)\
**Post date:** [August 8, 2014, 6:44pm UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/17 "2014-08-08T18:44:28Z")

</div>

Put your files on Drop Box or Google drive and join the modern era already.  
then you can email/facebook/text/google chat/skype/whatever them a link to their files or folder and stop the nonsense of hunting for and messing with physical drives period.

---

<div class="post-metadata">

**Author:** ![butler1850](https://avatars.discourse-cdn.com/v4/letter/b/779978/32.png) [@butler1850](https://boards.straightdope.com/u/butler1850)\
**Post date:** [August 11, 2014, 7:49pm UTC](https://boards.straightdope.com/t/is-it-possible-to-make-an-external-drive-copy-only/695043/18 "2014-08-11T19:49:55Z")

</div>

> [@Critical1](#):
>
> Put your files on Drop Box or Google drive and join the modern era already.  
> then you can email/facebook/text/google chat/skype/whatever them a link to their files or folder and stop the nonsense of hunting for and messing with physical drives period.

And make things harder for those on the receiving end that have IT departments that give a little bit of a shit about security. My workplace blocks all of those due to HUGE security risks in both directions of travel for data.
