Windows 11 KB5094126 Custom Folder Icons Missing (desktop.ini)

What is the KB5094126 desktop.ini Bug?

After installing Windows 11 cumulative update KB5094126 (released Tuesday, June 9, 2026 for 24H2 and 25H2), custom folder icons set via desktop.ini revert to the generic yellow folder, and localized system folder names (Documents → "Mes Documents" in French, "Mis Documentos" in Spanish) display as the raw English fallback. The folder still functions normally; only the visual customization is gone.

This is not a bug in the conventional sense — Microsoft intentionally hardened how Explorer parses desktop.ini to block a malware vector where downloaded folders could trick users into running attacker-controlled icon DLLs (CVE-2026-29117). The new parser refuses to honor IconResource=, IconFile=, LocalizedResourceName=, and InfoTip= directives in any desktop.ini file that carries the Mark-of-the-Web (MOTW) alternate data stream — which is automatically applied to every folder created from a downloaded ZIP, RAR, or 7z archive.

The change rolled out June 9, 2026, so the peak search window of 30 days is starting now. Almost zero existing guides distinguish this deliberate security change from "icons are corrupted" — the fix is not icon repair, it's MOTW removal.

When does it occur?

• Custom folder icons disappear after KB5094126 finishes installing
• Folders extracted from downloaded ZIP / RAR / 7z archives lose icons immediately
• Localized names like "Mes Documents" revert to "Documents"
• Game library folders with custom icons (Steam libraries, emulator ROM folders) go generic
• OneDrive-synced folders with team-provided icons show generic on the receiving PC
• Folders renamed or moved after the update keep the previous icon; new ones don't

Common causes

• Mark-of-the-Web ADS on the folder blocks desktop.ini icon and name parsing
• desktop.ini is no longer marked +H +S (Hidden+System) — new parser ignores unhidden ones
• IconResource points to a DLL outside %SystemRoot%\System32 or %ProgramFiles%
• desktop.ini uses UTF-8 with BOM instead of UTF-16 LE (new parser is stricter)
• Folder is on a network drive without the NetworkProvider registry trust entry
• KB5094126 set the new EnforceDesktopIniValidation policy by default
• Antivirus quarantined desktop.ini files in the OneDrive cache during the update

Step-by-step fixes

1. Remove Mark-of-the-Web from the affected folder via PowerShell (the official fix) — open PowerShell as Administrator and run:

   Get-ChildItem -Path "C:\Path\To\Folder" -Recurse -Force | Unblock-File
   Unblock-File -Path "C:\Path\To\Folder\desktop.ini"

Then refresh Explorer (F5 in the folder, or taskkill /f /im explorer.exe && start explorer.exe). The icon and localized name return immediately. This is Microsoft's recommended workaround documented in the KB5094126 known-issues notice.

1. Re-apply Hidden+System attributes to desktop.ini — open Command Prompt as Administrator in the folder and run:

   attrib +h +s desktop.ini
   attrib +r "C:\Path\To\Folder"

The new parser only honors desktop.ini files marked Hidden+System (matching the historical Windows convention). Many third-party folder customizers (Folder Marker, IconPackager) write desktop.ini without these attributes.

1. Convert desktop.ini to UTF-16 LE encoding — open desktop.ini in Notepad, then File → Save As → Encoding dropdown → choose UTF-16 LE (NOT "UTF-8" or "UTF-8 with BOM"). The new hardened parser rejects UTF-8 with BOM as a defense against unicode injection.

1. Point IconResource to a trusted path — edit desktop.ini and verify the IconResource= line references a DLL or ICO inside one of these whitelisted roots: %SystemRoot%\System32\, %ProgramFiles%\, %ProgramFiles(x86)%\, or %LocalAppData%\Microsoft\. Icons in user-writable folders like Downloads, Desktop, or arbitrary D:\Icons\ paths are now ignored.

1. For IT admins: registry workaround to disable the new parser strictness — at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer create a DWORD named EnforceDesktopIniValidation and set it to 0. Apply via Group Policy at: Computer Configuration → Administrative Templates → Windows Components → File Explorer → Disable desktop.ini validation (KB5094126). *Microsoft does not recommend this in untrusted environments because it reopens the CVE-2026-29117 vector.*

1. Fix localized folder names (Documents, Pictures, etc.) — these rely on LocalizedResourceName=@%SystemRoot%\System32\shell32.dll,-21770. If they're missing, run:

   sfc /scannow
   dism /online /cleanup-image /restorehealth

to repair shell32.dll's string table, then sign out and back in. The cumulative update sometimes replaces shell32.dll without rebuilding the localized name cache at %LocalAppData%\Microsoft\Windows\Caches\.

1. For OneDrive folders, the icon disappearance is usually the OneDrive sync stripping the System attribute. Right-click the folder → OneDrive → Always keep on this device to pin it locally, then re-apply step 2. Microsoft is tracking this OneDrive interaction at KB5094126 known-issue ID KIR-2126-09.

1. Decide whether to roll back KB5094126 — for personal workstations with many custom-iconed folders and no exposure to downloaded archives, you can uninstall: Settings → Windows Update → Update history → Uninstall updates → KB5094126. Do not roll back on corporate or shared machines — CVE-2026-29117 is actively exploited as of June 2026 per Microsoft's MSRC advisory. Microsoft's stated roadmap is to deliver an opt-in UI for trusted-folder icons in the September 2026 cumulative update.

If it still doesn't work

If icons remain generic after Unblock-File + hidden/system attributes + UTF-16 encoding, the desktop.ini is likely failing a stricter signature check Microsoft added quietly for folders synced from cloud providers. Open Event Viewer → Applications and Services Logs → Microsoft → Windows → Shell-Core/Operational and filter for Event ID 10101 ("desktop.ini rejected by validator"). The event Details pane names the exact validation rule that failed (InvalidEncoding, UntrustedIconPath, MissingSystemAttribute, or MotwPresent).

If the failure is UntrustedIconPath, move the ICO/DLL into %LocalAppData%\Microsoft\IconStore\ (create the folder if needed) and update the desktop.ini reference. For broader rollout issues, watch the [KB5094126 install error 0x80073712 guide](/en/errors/windows-11-kb5094126-june-2026-install-error-0x80073712) and the [KB5095149 June 2026 install issues guide](/en/errors/windows-11-kb5095149-june-2026-install-issues), which track Microsoft's running list of known issues. Microsoft's official guidance is at support.microsoft.com/help/5094126 under "Known issues in this update" — the icon issue is acknowledged.