Windows 11 Users Urged to Preserve New 'inetpub' Folder After Update

Windows 11 users who recently browsed their files after a system update earlier this month may have encountered a new and unfamiliar folder labeled "inetpub." This folder, while seemingly innocuous at first glance, actually plays a crucial role in the functioning of the operating system.
The appearance of the empty "inetpub" folder has sparked a wave of curiosity and confusion among users online, with many opting to delete it in response to their uncertainty. However, it is important to note that this folder is essential for managing logs related to Internet Information Services (IIS), a web server application developed by Microsoft. Alarmingly, this folder appeared on systems even for those who do not have the IIS service activated, leading to further bewilderment.
While users might not have noticed any immediate adverse effects after deleting the folder, Microsoft has issued a warning that such actions could inadvertently create a security vulnerability on affected devices. In a recent security update, the tech giant stated, "After installing the updates listed in the Security Updates table for your operating system, a new %systemdrive%\inetpub folder will be created on your device. This folder should not be deleted, regardless of whether Internet Information Services (IIS) is active on the target device. This behavior is part of changes that increase protection and does not require any action from IT admins and end users."
Experts confirm that the deletion of this critical folder can expose users to potential threats. Microsoft elaborated that the absence of the "inetpub" folder can create a scenario in which an attacker might exploit a vulnerability known as a "link following flaw" to gain unauthorized access to the affected computer. Despite the severity of the issue, Microsoft has not yet responded to requests for further clarification.
According to Satnam Narang, a senior staff research engineer at the cybersecurity firm Tenable, the fact that Microsoft elevated this issue in its security advisories speaks volumes about its significance. Narang remarked, "It's a bit of a headscratcher, but if Microsoft says it's needed to thwart exploitation somehow, then consumers should take it seriously." This statement underscores the importance of understanding the underlying reasons for such updates and taking them into account when managing system files.
For those who may have mistakenly deleted the "inetpub" folder, restoring it is a straightforward process. The best approach is to activate Internet Information Services, which will automatically recreate the folder and rectify the corresponding security vulnerability. This can be done by following these steps:
- Open the Control Panel on your Windows 11 device.
- Navigate to Programs, then select Programs and Features.
- Click on "Turn Windows features on or off."
- Locate and check the box next to Internet Information Services.
- Click OK to apply the changes.
Once this is completed, users can navigate back to their Windows folder to confirm that the "inetpub" folder has been successfully restored. According to Narang, it is essential that the folder has the correct permissions set to function properly. Therefore, reinstalling IIS is the optimal way to ensure that the folder is reinstated correctly. He added, "Once installed, users can uninstall IIS, as the folder will remain on the system after." This simple act of restoration can go a long way in enhancing the security posture of Windows 11 users.