News
Microsoft Rolls Out PowerShell Fix to Restore Critical ‘inetpub’ Folder After April 2025 Windows Updates
<p data-start="108" data-end="411">Windows users faced a surprise after April’s security updates when an empty <code data-start="184" data-end="196">C:\inetpub</code> folder suddenly appeared on their systems. Now, Microsoft has released a PowerShell script to help restore this folder for those who mistakenly deleted it—because deleting it could reopen a dangerous security hole.</p>
<h2 data-start="418" data-end="480">Why That Empty &#8216;inetpub&#8217; Folder Matters More Than You Think</h2>
<p data-start="482" data-end="774">If you noticed an empty folder named <code data-start="519" data-end="528">inetpub</code> on your C: drive after the April 2025 updates, you’re not alone. This folder is linked to Internet Information Services (IIS), Microsoft’s web server platform. But here&#8217;s the catch—most users don’t even run IIS, so why is this folder showing up?</p>
<p data-start="776" data-end="1054">Turns out, Microsoft created it as a protective measure against a serious vulnerability, CVE-2025-21204, which allows attackers to escalate privileges through Windows Process Activation. Simply put: the folder is a kind of safety shield, even if you’re not running a web server.</p>
<p data-start="1056" data-end="1351">Now, some users got puzzled and deleted the folder, thinking it was useless clutter. That’s risky. Removing it can leave your system open to the flaw the update was supposed to patch. Microsoft warned against deleting it in their advisory but also offered a way to fix things if you already did.</p>
<p data-start="1056" data-end="1351"><a href="https://www.theibulletin.com/wp-content/uploads/2025/06/Windows-inetpub-folder-security-patch-April-2025-update.jpg"><img class="aligncenter size-full wp-image-57625" src="https://www.theibulletin.com/wp-content/uploads/2025/06/Windows-inetpub-folder-security-patch-April-2025-update.jpg" alt="Windows inetpub folder security patch April 2025 update" width="1156" height="813" /></a></p>
<h2 data-start="1353" data-end="1428">The PowerShell Script That Brings the Folder Back—and Why It’s Important</h2>
<p data-start="1430" data-end="1654">On Wednesday, Microsoft updated its CVE-2025-21204 advisory, releasing a handy PowerShell script to help IT admins and savvy users recreate the folder with the correct permissions. The commands are straightforward:</p>
<div class="contain-inline-size rounded-2xl border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary"></div>
<p data-start="1776" data-end="1930">Running this script sets up the right access controls to keep unauthorized users out, closing the door on possible exploitation tied to the vulnerability.</p>
<p data-start="1932" data-end="2151">The script also secures another folder called on Windows Server machines, which came into play with earlier February 2025 updates. So it’s a two-for-one fix that boosts overall system security.</p>
<h2 data-start="2153" data-end="2209">What Happens If You Don’t Use IIS? The Confusing Part</h2>
<p data-start="2211" data-end="2300">You might ask: “But I don’t use IIS at all, so why do I need that folder?” Good question.</p>
<p data-start="2302" data-end="2576">When you install IIS through the Windows &#8220;Turn Windows Features on or off&#8221; panel, the <code data-start="2388" data-end="2397">inetpub</code> folder appears naturally, filled with files needed for the web server. But if you uninstall IIS, the folder sticks around, empty but still important for this vulnerability patch.</p>
<p data-start="2578" data-end="2800">Microsoft says that even if IIS isn’t active on your machine, deleting the <code data-start="2653" data-end="2662">inetpub</code> folder isn’t a good idea because it’s now part of Windows’ protection scheme. The folder helps keep things locked down behind the scenes.</p>
<p data-start="2802" data-end="2827">Here’s a quick breakdown:</p>
<ul data-start="2829" data-end="3034">
<li data-start="2829" data-end="2897">
<p data-start="2831" data-end="2897">Installing IIS: Creates <code data-start="2855" data-end="2864">inetpub</code> with files and system ownership.</p>
</li>
<li data-start="2898" data-end="2964">
<p data-start="2900" data-end="2964">Uninstalling IIS: Folder remains, empty but needed for security.</p>
</li>
<li data-start="2965" data-end="3034">
<p data-start="2967" data-end="3034">Deleting folder: Opens system back up to privilege escalation risk.</p>
</li>
</ul>
<p data-start="3036" data-end="3065">So basically, don’t touch it.</p>
<h2 data-start="3067" data-end="3129">The Security Risk Behind This Folder: What You Need to Know</h2>
<p data-start="3131" data-end="3371">The vulnerability fixed here involves an “improper link resolution” in the Windows Update stack. This means Windows might follow symbolic links wrongly, allowing attackers to trick the system into changing or accessing files they shouldn’t.</p>
<p data-start="3373" data-end="3524">The scary bit? Attackers with minimal access could elevate their permissions to the SYSTEM account level, which is basically full control over your PC.</p>
<p data-start="3526" data-end="3829">Microsoft’s message is clear: the empty <code data-start="3566" data-end="3575">inetpub</code> folder is a shield that shouldn’t be removed. Cybersecurity expert Kevin Beaumont even showed how this folder can be misused by non-admin users to block Windows updates by creating a junction link, which highlights its critical role in system integrity.</p>
<h2 data-start="3831" data-end="3870">What Users Should Do Now: Quick Tips</h2>
<p data-start="3872" data-end="3927">If you find the folder missing, here’s what you can do:</p>
<ul data-start="3929" data-end="4196">
<li data-start="3929" data-end="3999">
<p data-start="3931" data-end="3999">Use the PowerShell script Microsoft released to restore permissions.</p>
</li>
<li data-start="4000" data-end="4087">
<p data-start="4002" data-end="4087">Alternatively, reinstall IIS via the control panel to bring the folder back properly.</p>
</li>
<li data-start="4088" data-end="4143">
<p data-start="4090" data-end="4143">Never manually delete or modify the <code data-start="4126" data-end="4135">inetpub</code> folder.</p>
</li>
<li data-start="4144" data-end="4196">
<p data-start="4146" data-end="4196">Keep your Windows updated with the latest patches.</p>
</li>
</ul>
<div class="_tableContainer_16hzy_1">
<div class="_tableWrapper_16hzy_14 group flex w-fit flex-col-reverse" tabindex="-1">
<table class="w-fit min-w-(--thread-content-width)" data-start="4198" data-end="4903">
<thead data-start="4198" data-end="4339">
<tr data-start="4198" data-end="4339">
<th data-start="4198" data-end="4232" data-col-size="sm">Action</th>
<th data-start="4232" data-end="4288" data-col-size="md">How To</th>
<th data-start="4288" data-end="4339" data-col-size="md">Why It Matters</th>
</tr>
</thead>
<tbody data-start="4480" data-end="4903">
<tr data-start="4480" data-end="4620">
<td data-start="4480" data-end="4514" data-col-size="sm">Restore <code data-start="4490" data-end="4499">inetpub</code> folder</td>
<td data-start="4514" data-end="4570" data-col-size="md">Run <code data-start="4520" data-end="4542">Set-InetpubFolderAcl</code> PowerShell script</td>
<td data-start="4570" data-end="4620" data-col-size="md">Re-establishes critical security permissions</td>
</tr>
<tr data-start="4621" data-end="4762">
<td data-start="4621" data-end="4654" data-col-size="sm">Install IIS</td>
<td data-start="4654" data-end="4711" data-col-size="md">Use “Turn Windows Features on or off” in Control Panel</td>
<td data-start="4711" data-end="4762" data-col-size="md">Creates folder with proper system files</td>
</tr>
<tr data-start="4763" data-end="4903">
<td data-start="4763" data-end="4796" data-col-size="sm">Avoid Deletion</td>
<td data-start="4796" data-end="4853" data-col-size="md">Don’t delete <code data-start="4811" data-end="4823">C:\inetpub</code> folder</td>
<td data-start="4853" data-end="4903" data-col-size="md">Prevents exposure to privilege escalation bug</td>
</tr>
</tbody>
</table>
<div class="sticky end-(--thread-content-margin) h-0 self-end select-none">
<div class="absolute end-0 flex items-end"></div>
</div>
</div>
</div>
<p data-start="4905" data-end="5031">It might seem weird that an empty folder matters so much, but this isn’t just about files—it’s about keeping your system safe.</p>
<p data-start="5038" data-end="5302">Microsoft’s warning resonates loud and clear: don’t delete the <code data-start="5101" data-end="5110">inetpub</code> folder, no matter what. It’s one of those odd but important things that quietly protect your PC. If you’ve deleted it, use their new script or reinstall IIS to stay protected. Simple as that.</p>

Microsoft Rolls Out PowerShell Fix to Restore Critical ‘inetpub’ Folder After April 2025 Windows Updates
Dogecoin Price Tumbles Amid Elon Musk and Donald Trump Public Clash
Cillian Murphy Returns to ‘28 Years Later’ Franchise — But Not Quite How Fans Expected
Google’s “Gemini Kingfall” May Be Its Most Powerful AI Yet
Trade war anxieties and a fresh push for stablecoin regulation helped fuel the sell-off
SonicWall Urges Users to Patch Critical Vulnerabilities in SMA Appliances Amid Exploited Attacks
Apple and LEGO Show How Focus Beats Diversification
The Rise of Bitcoin-Only Companies: Is It Time to Invest?
Bond Market Flashpoint: Yields Soar, Confidence Shakes
Atari’s Rollercoaster: From Pong Glory to Desert Burial
-
News3 months agoTaiwanese Companies Targeted in Phishing Campaign Using Winos 4.0 Malware
-
News2 months agoJustin Baldoni Hits Back at Ryan Reynolds, Calling Him a “Co-Conspirator” in Blake Lively Legal Battle
-
News4 months agoApple Shuts Down ADP for UK iCloud Users Amid Government Backdoor Demands
