Master browser hopping from one PC to the next. MRxSmb event ID 8003

[boe]

Hello,



my WINS/DHCP/DNS/File server is running Windows 2003 R2 X64 SP2 plus all
patches. I keep getting this in my event viewer - not sure what to do.
We only have on lan segment 10.10.10.x 255.255.255.0.



MRxSmb event ID 8003



The master browser has received a server announcement from the computer
AYZ-CONF3FB that believes that it is the master browser for the domain on
transport NetBT_Tcpip_{37A96983-F545-44C9-B933-A213316A3500}. The master
browser is stopping or an election is being forced.

[Lanwench [MVP - Exchange]]

boe <boe_d@hotmail.com> wrote:
> Hello,
>
>
>
> my WINS/DHCP/DNS/File server is running Windows 2003 R2 X64 SP2 plus
> all patches. I keep getting this in my event viewer - not sure
> what to do. We only have on lan segment 10.10.10.x 255.255.255.0.
>
>
>
> MRxSmb event ID 8003
>
>
>
> The master browser has received a server announcement from the
> computer AYZ-CONF3FB that believes that it is the master browser for
> the domain on transport
> NetBT_Tcpip_{37A96983-F545-44C9-B933-A213316A3500}. The master
> browser is stopping or an election is being forced.

Stop & disable the Computer Browser service on all client workstations via
group policy, and this will go away.

[boe]

Thanks - is there any disadvantage to disabling it on all the workstations?

"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
news:etSpPJQBIHA.4200@TK2MSFTNGP04.phx.gbl...
> boe <boe_d@hotmail.com> wrote:
>> Hello,
>>
>>
>>
>> my WINS/DHCP/DNS/File server is running Windows 2003 R2 X64 SP2 plus
>> all patches. I keep getting this in my event viewer - not sure
>> what to do. We only have on lan segment 10.10.10.x 255.255.255.0.
>>
>>
>>
>> MRxSmb event ID 8003
>>
>>
>>
>> The master browser has received a server announcement from the
>> computer AYZ-CONF3FB that believes that it is the master browser for
>> the domain on transport
>> NetBT_Tcpip_{37A96983-F545-44C9-B933-A213316A3500}. The master
>> browser is stopping or an election is being forced.
>
> Stop & disable the Computer Browser service on all client workstations via
> group policy, and this will go away.
>

[Lanwench [MVP - Exchange]]

boe <boe_d@hotmail.com> wrote:
> Thanks - is there any disadvantage to disabling it on all the
> workstations?

Nope, especially not if you're running WINS. This is part of my "standard
build" setup.


>
> "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
> message news:etSpPJQBIHA.4200@TK2MSFTNGP04.phx.gbl...
>> boe <boe_d@hotmail.com> wrote:
>>> Hello,
>>>
>>>
>>>
>>> my WINS/DHCP/DNS/File server is running Windows 2003 R2 X64 SP2 plus
>>> all patches. I keep getting this in my event viewer - not sure
>>> what to do. We only have on lan segment 10.10.10.x 255.255.255.0.
>>>
>>>
>>>
>>> MRxSmb event ID 8003
>>>
>>>
>>>
>>> The master browser has received a server announcement from the
>>> computer AYZ-CONF3FB that believes that it is the master browser for
>>> the domain on transport
>>> NetBT_Tcpip_{37A96983-F545-44C9-B933-A213316A3500}. The master
>>> browser is stopping or an election is being forced.
>>
>> Stop & disable the Computer Browser service on all client
>> workstations via group policy, and this will go away.

[boe]

Thanks - I appreciat it. I've never actually used the group policy
before - I just have a login script batch file. If it isn't too much work,
I would really appreciate some info on how to go about setting up a group
policy that turns off the computer browser.


"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
news:%236mzbZQBIHA.3848@TK2MSFTNGP05.phx.gbl...
> boe <boe_d@hotmail.com> wrote:
>> Thanks - is there any disadvantage to disabling it on all the
>> workstations?
>
> Nope, especially not if you're running WINS. This is part of my "standard
> build" setup.
>
>
>>
>> "Lanwench [MVP - Exchange]"
>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
>> message news:etSpPJQBIHA.4200@TK2MSFTNGP04.phx.gbl...
>>> boe <boe_d@hotmail.com> wrote:
>>>> Hello,
>>>>
>>>>
>>>>
>>>> my WINS/DHCP/DNS/File server is running Windows 2003 R2 X64 SP2 plus
>>>> all patches. I keep getting this in my event viewer - not sure
>>>> what to do. We only have on lan segment 10.10.10.x 255.255.255.0.
>>>>
>>>>
>>>>
>>>> MRxSmb event ID 8003
>>>>
>>>>
>>>>
>>>> The master browser has received a server announcement from the
>>>> computer AYZ-CONF3FB that believes that it is the master browser for
>>>> the domain on transport
>>>> NetBT_Tcpip_{37A96983-F545-44C9-B933-A213316A3500}. The master
>>>> browser is stopping or an election is being forced.
>>>
>>> Stop & disable the Computer Browser service on all client
>>> workstations via group policy, and this will go away.
>
>
>

[G]

I assume that AYZ-CONF3FB is not your domain controller, but a PC in the
domain.

If it isn't already, setting
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\Parameters\IsDomainMaster
to True on your domain controller should help. Restarting the Computer
Browser on your DC should also force it to announce that it is the master
browser. Setting it to false on your PCs should keep them from doing this
again.
________
Greg Stigers, MCSA
remember to vote for the answers you like

[Lanwench [MVP - Exchange]]

boe <boe_d@hotmail.com> wrote:
> Thanks - I appreciat it. I've never actually used the group policy
> before - I just have a login script batch file. If it isn't too
> much work, I would really appreciate some info on how to go about
> setting up a group policy that turns off the computer browser.

I'd create a custom GPO for your workstations, & not muck around with any of
the built-in ones. Link it at the approprriate OU ( you have to be using
custom OUs to do this...but you should be anyway).

This is in Computer Configuration\Windows Settings\Security Settings\System
Services.

Try posting in m.p.windows.group_policy for more expert help with group
policy.
>
>
> "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
> message news:%236mzbZQBIHA.3848@TK2MSFTNGP05.phx.gbl...
>> boe <boe_d@hotmail.com> wrote:
>>> Thanks - is there any disadvantage to disabling it on all the
>>> workstations?
>>
>> Nope, especially not if you're running WINS. This is part of my
>> "standard build" setup.
>>
>>
>>>
>>> "Lanwench [MVP - Exchange]"
>>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
>>> message news:etSpPJQBIHA.4200@TK2MSFTNGP04.phx.gbl...
>>>> boe <boe_d@hotmail.com> wrote:
>>>>> Hello,
>>>>>
>>>>>
>>>>>
>>>>> my WINS/DHCP/DNS/File server is running Windows 2003 R2 X64 SP2
>>>>> plus all patches. I keep getting this in my event viewer - not
>>>>> sure what to do. We only have on lan segment 10.10.10.x
>>>>> 255.255.255.0. MRxSmb event ID 8003
>>>>>
>>>>>
>>>>>
>>>>> The master browser has received a server announcement from the
>>>>> computer AYZ-CONF3FB that believes that it is the master browser
>>>>> for the domain on transport
>>>>> NetBT_Tcpip_{37A96983-F545-44C9-B933-A213316A3500}. The master
>>>>> browser is stopping or an election is being forced.
>>>>
>>>> Stop & disable the Computer Browser service on all client
>>>> workstations via group policy, and this will go away.

[Lanwench [MVP - Exchange]]

G <gregstigers+w@spamcop.net> wrote:
> I assume that AYZ-CONF3FB is not your domain controller, but a PC in
> the domain.
>
> If it isn't already, setting
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\Parameters\IsDomainMaster
> to True on your domain controller should help. Restarting the Computer
> Browser on your DC should also force it to announce that it is the
> master browser. Setting it to false on your PCs should keep them from
> doing this again.
> ________


True, but registry changes are more of a pain to deploy, and as the Computer
Browser service has no valid purpose on a workstation in a properly
configured domain, it's a cinch to stop & disable it & make this problem go
away forever.

[boe]

Thanks
"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
news:ONctxHcBIHA.4584@TK2MSFTNGP03.phx.gbl...
> boe <boe_d@hotmail.com> wrote:
>> Thanks - I appreciat it. I've never actually used the group policy
>> before - I just have a login script batch file. If it isn't too
>> much work, I would really appreciate some info on how to go about
>> setting up a group policy that turns off the computer browser.
>
> I'd create a custom GPO for your workstations, & not muck around with any
> of the built-in ones. Link it at the approprriate OU ( you have to be
> using custom OUs to do this...but you should be anyway).
>
> This is in Computer Configuration\Windows Settings\Security
> Settings\System Services.
>
> Try posting in m.p.windows.group_policy for more expert help with group
> policy.
>>
>>
>> "Lanwench [MVP - Exchange]"
>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
>> message news:%236mzbZQBIHA.3848@TK2MSFTNGP05.phx.gbl...
>>> boe <boe_d@hotmail.com> wrote:
>>>> Thanks - is there any disadvantage to disabling it on all the
>>>> workstations?
>>>
>>> Nope, especially not if you're running WINS. This is part of my
>>> "standard build" setup.
>>>
>>>
>>>>
>>>> "Lanwench [MVP - Exchange]"
>>>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
>>>> message news:etSpPJQBIHA.4200@TK2MSFTNGP04.phx.gbl...
>>>>> boe <boe_d@hotmail.com> wrote:
>>>>>> Hello,
>>>>>>
>>>>>>
>>>>>>
>>>>>> my WINS/DHCP/DNS/File server is running Windows 2003 R2 X64 SP2
>>>>>> plus all patches. I keep getting this in my event viewer - not
>>>>>> sure what to do. We only have on lan segment 10.10.10.x
>>>>>> 255.255.255.0. MRxSmb event ID 8003
>>>>>>
>>>>>>
>>>>>>
>>>>>> The master browser has received a server announcement from the
>>>>>> computer AYZ-CONF3FB that believes that it is the master browser
>>>>>> for the domain on transport
>>>>>> NetBT_Tcpip_{37A96983-F545-44C9-B933-A213316A3500}. The master
>>>>>> browser is stopping or an election is being forced.
>>>>>
>>>>> Stop & disable the Computer Browser service on all client
>>>>> workstations via group policy, and this will go away.
>
>
>