For a few months now, many Windows users have been surprised by the sudden appearance of a mysterious folder called inetpub in the root of their hard drive, specifically in C: \After the surprise, many users wonder if it is possible. delete the inetpub folder without affecting Windows.
This mysterious folder has become visible after installing certain updates, such as the well-known KB5055523 in Windows 11. And also in other recent patches for Windows 10. There are all kinds of theories to explain it. A Microsoft error? A malware infection? We'll address all of these below.
What exactly is the inetpub folder and why does it appear in Windows?
Folder inetpub It is a directory traditionally associated with Internet Information Services (IIS), the native web server included with Windows. IIS is a utility that allows you to host web pages, applications, and other related services in a local or production environment, especially on professional and server versions of Windows.
Historically, the folder C:\inetpub It stored the resources, logs and configurations of the website published through IIS, and was created only when this feature was explicitly enabled from the control panel.
However, The big plot twist has arrived in 2025 when, after installing updates such as the aforementioned KB5055523 or build 24H2, The inetpub folder has started appearing automatically on all Windows 10 and Windows 11 computers..
Why does this happen? Microsoft has confirmed that The creation of inetpub is part of changes in security policyAlthough the folder appears empty and without clear documentation, the official explanation is that its presence strengthens Windows' protection against certain recently detected vulnerabilities.
Why does Microsoft recommend not deleting the inetpub folder?
Microsoft's official position is clear: You must leave the inetpub folder as it is in the systemAccording to the updated text in their patch notes, the folder is created whether IIS is enabled or not, and its purpose is to "increase operating system protection." Specifically, they clarify that:
- No action is required by the user or administrator.; inetpub is now part of the new default configuration after applying the update.
- It is not relevant whether IIS is enabled or not; the folder will still appear, even on home installations without any active web services.
- Removing it may cause future problems with Windows updates.There have been reports that some cumulative updates may not install correctly if the folder already existed before the patches were applied, or if it was subsequently deleted.
- There is no immediate negative impact to deleting the folder, but Microsoft emphasizes that its absence could result in the loss of intended protection against certain vulnerabilities, as well as failure to update the system.
The technical explanation points out that, in the face of vulnerabilities such as CVE-2025-21204 (privilege escalation via symbolic links in Windows Update), this directory is used to prevent malicious applications from taking advantage of its absence to attack the system.
Can inetpub be removed without consequences?
In tests carried out by technological means and experts, Deleting the inetpub folder manually does not cause immediate failures or affect the operation of Windows or common applications.. The folder, being empty, does not consume significant space or interfere with daily processes.
However, There are two important nuances to consider:
- If you delete the folder and then attempt to install a related update, the update may fail or be automatically recreated without warning.
- If you deleted the folder thinking it wasn't needed, it will reappear as soon as you install a recent cumulative patch, as the update process itself generates it if it doesn't exist.
Therefore, although at a technical level there is no immediate danger in deleting it, the official recommendation remains don't touch itIf you accidentally deleted it, you can "recover" it by temporarily enabling the IIS feature from the Control Panel, which will force Windows to automatically recreate Inetpub.
How to "recover" inetpub if you accidentally deleted it
After deleting the inetpub folder, you may need to restore the factory settings. To do this, there are simple methods to force Windows to recreate it:
- Access the Control Panel and look for the “Programs and Features” section.
- Click “Turn Windows features on or off.”
- Locate the option called Internet Information Services (IIS) in the alphabetical list and mark it to install.
- Click OK and allow Windows to complete the setup.
This procedure will reinstall IIS and, as part of the process, restore inetpub to its usual location.
Microsoft's reasons: security, patching, and vulnerabilities
Microsoft's decision to implement the inetpub folder is mainly due to the Need to close certain security holes detected in internal components of Windows Update. One of the most relevant vulnerabilities, the CVE-2025-21204, allowed local attackers to modify protected system files using the NT AUTHORITY identity via symbolic links and low privileges.
To counteract this type of failure, The April 2025 update and other cumulative updates create the inetpub folder with SYSTEM permissions, ensuring that no standard user or external application can exploit its absence for malicious purposes. The fact that the directory is empty doesn't mean it's unnecessary: its mere existence blocks attacks that rely on manipulating nonexistent paths or files that internal Windows services might attempt to use.
Hide or leave inetpub as is?
Another recurring question has been whether, instead of deleting the inetpub folder, it's better to simply hide it. Many users consider such an exposed structure to be a risk, or at least an unnecessary distraction.
The truth is, unless you have very specific reasons and you know what you're doing, It is best to leave inetpub visible and unmodified., waiting for future updates in which Microsoft reconsiders its policy or, at least, explains in greater detail the real reasons for its presence.
However Leaving it there and not deleting it, won't it affect the PC's performance? The answer is no. Inetpub, by remaining empty and inactive, doesn't consume resources, slow down your computer, or compete for valuable space. Furthermore, since it has no associated files unless IIS is enabled, it doesn't generate conflicts with either the disk or running processes. Its only "side effect" is purely aesthetic.
Situations where inetpub IS practical use
While most users will never interact with inetpub outside of this "mysterious folder" context, there are situations where it does play a significant role:
- When installed Internet Information Services (IIS) to host websites, develop applications compatible with ASP.NET, PHP or other environments, or perform local development testing.
- On enterprise networks or computers dedicated to internal web services, logs, intranets, or other resources that rely on IIS and use inetpub to organize published files.
- In educational, research, or experimental environments where a server environment on Windows needs to be simulated.
In these scenarios, inetpub will store files, logs, configurations, and all the resources needed for the web server. However, on conventional computers Their presence is simply a "wild card" for security and nothing more.