Technology

Microsoft's inetpub Folder: A Security Measure or a Mistake?

2025-04-14

Author: Charlotte

Microsoft Clarifies inetpub Folder Confusion

In a recent announcement, Microsoft has shed light on the mysterious appearance of the "inetpub" folder for Windows 11 users following the April 2025 update. Initially thought to be a glitch associated with the Windows 11 KB5055523 update, it turns out the folder's creation was intentional, although not well-documented. This lack of clarity sparked confusion among users, as highlighted by Windows Latest.

What Is the inetpub Folder?

The "inetpub" folder is typically associated with Internet Information Services (IIS), a web server platform used for hosting websites and applications on Windows systems. Normally, the folder is generated to store logs at C:\inetpub\logs\LogFiles when IIS is enabled. However, many users noticed this folder appearing even without IIS activated post-update, prompting questions about its necessity.

A Security Enhancement!

This folder creation stems from a critical security patch addressing the CVE-2025-21204 vulnerability, which could allow attackers to manipulate system files due to a flaw in the Windows Update Stack. This 'link following' issue could enable local attackers to exploit symbolic links, allowing them to access or modify files without authorization. Microsoft did not initially connect the inetpub folder's creation with improvements in security against this vulnerability.

Microsoft's Official Response

In light of user concerns, Microsoft updated its support documentation, stating that the inetpub folder's appearance is a result of enhanced security measures following the April 2025 updates. They cautioned users against deleting the folder, as it's crucial for system protection and does not require any action from users or IT administrators.

Restoring the inetpub Folder

For those who removed the inetpub folder, restoring it is simple. Users can re-enable IIS through the Control Panel. By navigating to Control Panel > Programs > Programs and Features, selecting "Turn Windows features on or off," finding and checking the box for "Internet Information Services," and then clicking OK, they can recreate the inetpub folder effortlessly once IIS is activated.

Why It Matters?

IIS is not just a developer's tool but also vital for organizations that depend on Microsoft's web server technology for secure hosting of both internal and external applications. The inetpub folder's inclusion ensures that Windows systems are equipped for any IIS-related service needs while reinforcing defenses against known vulnerabilities.

Recent Update Troubles: A Reminder?

Last month, Microsoft faced scrutiny after a Windows update inadvertently removed the Copilot app from several Windows 11 devices. This issue followed the March 11 Patch Tuesday update, which resulted in the AI assistant being uninstalled and unpinned from the taskbar. Connected to the KB5053598 (Windows 24H2) and KB5053606 (Windows 10 22H2) cumulative updates, it serves as a reminder of the complexity and potential hiccups involved in software updates.