Microsoft has confirmed that a mysterious empty folder appearing on system drives following the latest Windows 11 update is not an error, but a deliberate and essential component of a new security fix.

The folder, named ‘inetpub’, began appearing for users after the rollout of the April 2025 cumulative update for Windows 11 version 24H2, prompting widespread confusion and speculation online. Many users, especially those not running Microsoft’s Internet Information Services (IIS) web server, questioned its purpose—some even deleting it outright, assuming it was unnecessary.

However, Microsoft has now clarified that the folder plays a key role in patching a local privilege escalation vulnerability, and that its presence is vital—even if IIS is not in use.

“This folder should not be deleted, regardless of whether Internet Information Services (IIS) is active on the target device,” Microsoft told Windows Latest. “This behavior is part of changes that increase protection and does not require any action from IT admins and end users.”

According to Microsoft, the vulnerability in question could allow attackers with local access to trick the operating system into accessing or modifying unintended files or folders. The creation of the ‘inetpub’ directory—typically used by IIS to store web content—now serves as a defensive mechanism to neutralise that threat.

Silent Security

The implementation has attracted criticism from IT professionals and users alike, not because of the folder’s function, but due to Microsoft’s lack of communication around the change. The company did not flag the folder’s creation in its release notes, leaving users unaware of its role in maintaining system security.

“It’s an unusual way to implement a security fix, and one that should have been clearly documented,” said Darren Allan, a veteran technology journalist. “An unexplained, empty folder on a system drive is naturally going to raise eyebrows—especially among power users.”

What If It’s Already Been Deleted?

For users who have already removed the folder, Microsoft recommends temporarily enabling IIS to restore it:

• Open Control Panel
• Go to Programs > Programs and Features
• Click ‘Turn Windows features on or off’
• Locate ‘Internet Information Services’, tick the box, and click OK

This will recreate the folder. IIS can then be disabled again, but the ‘inetpub’ directory should be left intact to ensure the patch remains effective.

Looking Ahead

The incident highlights broader concerns about transparency in Windows update processes, particularly as Microsoft continues to integrate deeper security features into the OS. It also underlines the need for clearer communication when such features affect visible elements of a user’s file system.

While the ‘inetpub’ folder may appear empty and redundant, users are strongly advised to leave it untouched. Its presence could be a small but crucial line of defense against exploitation.