Microsoft Urges Users to Restore Deleted 'inetpub' Folder Critical to Windows 11 Security
The folder, introduced in the April 2025 update, addresses a key vulnerability, but confusion over its purpose has led to widespread deletion.
- Microsoft confirmed that the 'inetpub' folder created in the April 2025 Windows 11 update is an essential component of a security fix for vulnerability CVE-2025-21204.
- Deleting the folder disables the security patch, leaving systems vulnerable to exploitation that could allow attackers to access or modify files locally.
- Confusion arose due to insufficient communication in Microsoft's release notes, leading many users to mistakenly delete the folder assuming it was unnecessary.
- Users who have deleted the folder can restore it by enabling Internet Information Services (IIS) through the Control Panel, as outlined in Microsoft's updated guidance.
- The incident highlights the need for clearer documentation in software updates to prevent user misunderstandings that compromise system security.