The web was mystified earlier this month by… okay, let me begin this once more. Very particular elements of the web had been mystified earlier this month by an empty folder labelled “inetpub” turning up amongst system information after the Home windows 11 April 2025 Replace.
Some took to deleting it, which on the floor brought about no points in any respect. Nevertheless, Microsoft has now up to date a assist doc instructing customers to go away it alone, because it’s tied to a safety replace.
The inetpub folder is used to retailer and handle Web Data Companies (ISS) logs, however even customers who didn’t have the service enabled noticed it seem after the KB5055523 Home windows replace (by way of Home windows Central). There it sat, as if it had all the time been there, however curious customers had been left none the wiser as to why it blinked into existence on their machines.
Microsoft has now confirmed in an up to date assist doc for vulnerability CVE-2025-21204 that the folder is a part of “adjustments that enhance safety” and that “this folder shouldn’t be deleted no matter whether or not Web Data Companies (IIS) is lively on the goal system.”
The textual content is highlighted in daring, so you already know it is severe. Nevertheless, Microsoft has nonetheless not defined why the empty folder is so very important to its safety fixes, leaving us no extra enlightened as to what it truly does.
CVE-2025-21204 is expounded to an elevation of privilege vulnerability that permits would-be-attackers to change system information and folders, so maybe MS is including the folder to all installs whether or not it is wanted or to not create a standardised system that’s much less weak to this explicit exploit.
Pure hypothesis, that. I actually do not know, and Microsoft would not appear to really feel the necessity to clarify any additional. A folder it’s, and a folder it should stay.
Microsoft has reportedly informed Home windows Central that Home windows 11 customers who deleted the folder should reinstate it by turning Web Data Companies on within the Management Panel. Then the folder can return to doing… no matter it is imagined to do, I presume.
The thriller continues. I for one shall be keeping track of my private intepub folder to see if it does something attention-grabbing, like populating itself with logs of my latest spelling errors or maintaining observe of my procuring habits. You by no means know, do you?
