Microsoft: Don't Delete This Windows Folder

Deleting empty folders is often a good idea to keep a computer clutter-free and make it easier to see what you're actually looking for. But Microsoft has warned users not to delete an empty folder called "inetpub" in Windows.

Although the folder is empty for most users, it's actually part of a security fix. The problem is Microsoft forgot to tell anyone about it.

The folder shows up in the system drive. That's the hard drive which houses Windows itself. For many, and likely most, users this would be the C drive.

Normally "inetpub" would only appear if you use a tool called Internet Information Services to host a website or app on your Windows computer. In the context of the entire Windows user base, that's a pretty niche tool so it's no surprise it was unfamiliar to other people.

This Folder Intentionally Left Blank

In early April, the folder started showing up even on computers where the user had never run Internet Information Services, in which case it was completely blank. That led some experts to advise that it was safe to delete and possible even a good idea to do so.

Unfortunately the folder is indeed meant to be there and is necessary to stay protected. Microsoft intentionally created it as part of this month's regular security update but its accompanying guidance mistakenly failed to mention that it would appear. That's now been fixed in updated guidance.

It was created as part of a security fix to deal with a problem which is itself somewhat confusing. The problem meant attackers could potentially exploit Windows Update itself "into accessing or modifying unintended files or folders." (Source: techradar.com)

Straightforward Fix

The good news is that there's a straightforward solution for anyone who has deleted the folder. They can open the Control Panel, select Programs and then Programs and Features and then "Turn Windows features on or off". From the resulting menu, they can simply check the box marked "Internet Information Services" and then click OK.

There's no need to actually run Internet Information Services. Enabling it this way should automatically create an empty folder than then allows the security fix to operate. (Source: windowslatest.com)

What's Your Opinion?

Do you check for and delete empty folders? Had you spotted "inetpub"? Does Microsoft do enough to tell users about security fixes and problems?