By default, Microsoft Windows 11 conceals sensitive operating system files—such as boot configuration caches, virtual memory swap files (pagefile.sys and swapfile.sys), hibernation images (hiberfil.sys), and desktop configuration scripts (desktop.ini). This built-in safeguard prevents casual users from accidentally modifying, renaming, or deleting files essential for the computer’s stability. However, when performing advanced system diagnostics, recovering drive space, or configuring dual-boot environments, exposing these protected files becomes necessary.
Understanding Standard Hidden Files vs Protected OS Files
Windows File Explorer maintains two separate layers of file concealment:
- Standard Hidden Files: Generic user folders (such as
AppData) that are hidden by a simple file attribute. These can be toggled visible via the basic View > Show > Hidden items menu. - Protected Operating System Files: Critical core files that remain completely invisible even after enabling standard hidden items. These require modifying advanced folder options and acknowledging a security prompt.
Unhiding Protected System Files in File Explorer Options
To expose protected system files across all internal drives and system partitions:
- Open File Explorer by pressing
Windows Key + E. - In the top command bar, click the See more button (the three horizontal dots
…). - Select Options from the drop-down menu to open the Folder Options control panel.
- Switch to the View tab at the top of the window.
- Scroll down the Advanced settings tree to find the entry labelled Hide protected operating system files (Recommended).
- Uncheck the box next to Hide protected operating system files (Recommended).
- A warning dialogue will appear: “You have chosen to display protected operating system files… Are you sure you want to display these files?” Click Yes to confirm.
- Ensure the radio button for Show hidden files, folders, and drives is also selected.
- Click Apply, then click OK.
Identifying Protected Files on Your System Drive
Once enabled, open your root system drive (usually C:). You will observe previously concealed files and system folders displayed with slightly translucent icons:
pagefile.sys&swapfile.sys: The physical memory paging files used by Windows to manage virtual RAM.hiberfil.sys: The hibernation memory snapshot file used during Fast Startup and sleep states.System Volume Information: The protected directory holding System Restore points and volume shadow copies.
Restoring Protection After Troubleshooting
Because protected system files are vulnerable to unintentional deletion or modification, re-enable the safety filter once your diagnostic work is complete by reopening Folder Options > View and checking Hide protected operating system files (Recommended).