{"id":37692,"date":"2025-04-11T06:41:49","date_gmt":"2025-04-11T04:41:49","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=37692"},"modified":"2025-04-24T23:00:14","modified_gmt":"2025-04-24T21:00:14","slug":"windows-10-11-april-2025-updates-create-inetpub-folder","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2025\/04\/11\/windows-10-11-april-2025-updates-create-inetpub-folder\/","title":{"rendered":"Windows 10\/11: April 2025 updates create \"inetpub\" folder"},"content":{"rendered":"

\"Windows\"[German<\/a>]Small addendum from the April 2025 patchday (April 8, 2025) – due to all the bugs, I haven't gotten around to reporting another (cosmetic) error yet. In Windows 10 (2019 and 22H2) and Windows 11 (23H2 and 24H2), an empty \"inetpub\" folder is suddenly created when April 2025 security updates are installed. That's for security measures.<\/p>\n

<\/p>\n

Windows 11 24H2 has suddenly an \"inetpub\" folder<\/h2>\n

\"\"After the April 2025 Patchday (April 8, 2025), there was an increase in complaints from Windows users who suddenly had an \"inetpub\" folder created on their Windows drive by the installed update. Will Dorman, for example, raised it in this twee<\/a>t.<\/p>\n

I came across this issue on various websites. Windows Latest, for example, describes it in the following tweet and in the article Windows 11 KB5055523 issue creates \"inetpub\" folder out of nowhere<\/a>.<\/p>\n

\"Windows<\/a><\/p>\n

The message in the article is that the update KB5055523<\/a> from April 8, 2025 under Windows 11 24H2 creates a folder \"inetpub\" on the system drive \"out of the blue\". The folder remains empty and is unprotected, so it could also be deleted by the user (but should not be).<\/p>\n

Folder \"inetpub\" is known<\/h2>\n

The \"inetpub\" folder is not unknown, as this directory is created when an administrator activates the Internet Information Services<\/em> in the Windows Features<\/em> dialog box.<\/p>\n

\"Internet<\/p>\n

Internet Information Services (IIS) is a feature, that provides a web server platform developed by Microsoft to host websites, web applications and services on Windows systems. This feature is not installed by default, but can be activated via the Windows Features<\/em> dialog box.<\/p>\n

I just have checked on my system I'm using currently. This features has not been activated and installed via the relevant checkbox. Nevertheless, I can find the folder on my Windows 10 2019 IoT Enterprise LTSC.<\/p>\n

All Windows versions affected<\/h2>\n

While Windows Latest still reports Windows 11 24H2 as affected, another user with Windows 11 23H2 has also reported<\/a> finding the folder.<\/p>\n

\"Ordner<\/a><\/p>\n

I myself find this folder under Windows 10 2019, which has also received an April 2025 update. The colleagues from Bleeping Computer write in this article<\/a> that Microsoft has confirmed that the inetpub<\/em> folder is also created under Windows 10.<\/p>\n

The reason why the folder was suddenly created is unknown. However, Bleeping Computer asked Microsoft and received an answer. According to Microsoft, the folder was created on purpose and should not be deleted. However, no explanation was provided.<\/p>\n

Explanation: It's for security measures<\/h2>\n

After I've published the German\u00a0Patrick points in a comment to the Microsoft description of CVE-2025-21204<\/a>. Within the FAQ it reads:<\/p>\n

Does installing the Windows security updates that address this CVE cause visible change on devices?<\/strong><\/p>\n

After installing the updates listed in the Security Updates table for your operating system, a new %systemdrive%\\inetpub folder will be created on your device.\u00a0This folder should not be deleted regardless of whether Internet Information Services (IIS) is active on the target device.<\/strong>\u00a0This behavior is part of changes that increase protection and does not require any action from IT admins and end users.<\/p><\/blockquote>\n

Addendum:<\/strong> Note my follow up article April 2025 patch for Windows Symlink vulnerability CVE-2025-21204 tears new security issue<\/a>. Without the inetpub folder created by the patch, attackers could block Windows updates via a junction.<\/p>\n

Similar articles:<\/strong>
\nMicrosoft Security Update Summary (April 8, 2025)<\/a>
\nPatchday: Windows 10\/11 Updates (April 8, 2025)<\/a>
\nPatchday: Windows Server-Updates (April 8, 2025)<\/a>
\nPatchday: Microsoft Office Updates (April 8, 2025)<\/a><\/p>\n

Word\/Excel 2016 crashing after April 2025 update KB5002700<\/a>
\nOutlook 2016: Calendar access blocked after April 2025 update KB5002700<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

[German]Small addendum from the April 2025 patchday (April 8, 2025) – due to all the bugs, I haven't gotten around to reporting another (cosmetic) error yet. In Windows 10 (2019 and 22H2) and Windows 11 (23H2 and 24H2), an empty … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[463,22,2],"tags":[47,76,2643],"class_list":["post-37692","post","type-post","status-publish","format-standard","hentry","category-issue","category-update","category-windows","tag-issue","tag-windows-10","tag-windows-11"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/37692","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=37692"}],"version-history":[{"count":9,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/37692\/revisions"}],"predecessor-version":[{"id":37832,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/37692\/revisions\/37832"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=37692"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=37692"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=37692"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}