Offline Files / CSC.sys kernel driver started even though service set to disabled and offline files turned off

Question

Hi

I have offline files turned off, and the relevant service is set to disabled, but I noticed whilst diagnosing a slow running app that the c:\windows\csc folder was still being used.

Delving further I could see in msinfo32 that the CSC.sys kernel driver was started.

Any thoughts as to why the driver is still being started when the service is clearly set to disabled, as confirmed in screen shot above and checked in services.msc and registry to make sure.

I believe the cause of my app running slowly is definitely a caching / offline files issue so need to work out why it is ignoring my choice of having it turned off and still trying to write to C:\windows\csc.

Any thoughts please?

Answer 1

Hello there,

If the Offline Files feature is disabled in Windows, and the "CSC.sys" kernel driver is still starting, it might be due to some underlying issues or third-party software conflicting with the system settings. Here are some troubleshooting steps to identify and resolve the problem:

Check Group Policy Settings: Ensure that there are no Group Policy settings in effect that could override the local settings and force the Offline Files feature to be enabled. Group Policy settings can be found and modified using the Group Policy Editor (gpedit.msc).

Third-Party Software Conflict: Some third-party software or antivirus programs may interfere with Windows settings and services. Try temporarily disabling any third-party antivirus or security software to see if it affects the behavior of the "CSC.sys" kernel driver.

Check for Malware: Malware or viruses can sometimes cause unwanted behavior on the system. Run a full system scan using a reputable antivirus or anti-malware software to ensure your system is clean.

Disable Offline Files in Registry: If the Offline Files feature is disabled but still starting, you can try disabling it directly in the Windows Registry:

Press Windows + R, type "regedit," and press Enter to open the Registry Editor.

Navigate to the following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Csc

In the right pane, double-click on the "Start" value.

Change the value data to "4" (which means disabled).

Click OK and close the Registry Editor.

Note: Modifying the registry can be risky, so it's essential to create a backup or a system restore point before making any changes.

I used AI provided by ChatGPT to formulate part of this response. I have verified that the information is accurate before sharing it with you.

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer–