Your Windows PC might be at risk if you deleted the “inetpub” folder, but there’s a fix

In a recent turn of events following the Patch Tuesday update for April 2025, Windows users have encountered an unexpected addition to their systems: a mysterious “inetpub” folder. This folder appeared on the primary drive, typically the C: drive, immediately after the update, prompting a wave of curiosity and concern among users.

Despite being empty and occupying no storage space, many users opted to delete the folder, driven by a sense of unease. Microsoft, however, has reassured users that there is no cause for alarm regarding this folder. It was created as part of a security patch addressing the vulnerability identified as CVE-2025-21204. While the tech giant has not explicitly instructed users against deleting it, they have emphasized the importance of retaining the folder to ensure continued security updates.

You can run a PowerShell script to bring the folder back

According to reports from Windows Latest, Microsoft has clarified that the “inetpub” folder should not be removed. For those who have already deleted it, the company has provided guidance on how to restore it. The folder is associated with a Windows feature known as Internet Information Services (IIS), which, although requiring manual activation, was automatically installed on all systems during the update.

The security flaw that the folder addresses stems from an improper link resolution issue. Without the folder, unpatched devices may inadvertently allow local attackers to manipulate files and folders through misleading symbolic links. To restore the “inetpub” folder without enabling IIS, users can utilize a PowerShell script. Here’s a step-by-step guide:

1. Run PowerShell as Administrator.
2. Allow signed scripts and modules by entering the following command:

   Set-ExecutionPolicy -Scope Process -ExecutionPolicy Bypass

3. Download the script with this command:

   Install-Script -Name Set-InetpubFolderAcl -Force

4. If prompted, install the NuGet Provider by responding with ‘Y’. Then, rerun the previous command.
5. Finally, apply the fix with:

   Set-InetpubFolderAcl

If users encounter an error indicating that the command cannot be found, they can execute it using the full path:

& "C:Program FilesWindowsPowerShellScriptsSet-InetpubFolderAcl.ps1"

Following these steps will successfully recreate the “inetpub” folder, ensuring that systems remain secure and up-to-date.