Event 8032 Backup Browser is stopping

I'm running a Windows 2003 native domain (was originally an NT domain a few
years ago) with 2 x DCs, 4 member servers and roughly 50 clients.

My 'original' DC which holds the FSMO roles is the Master Browser.
On virtually all other computers in the domain, the Event Logs are throwing up

Event Source: BROWSER
Event Category: None
Event ID: 8032
Description:
The browser service has failed to retrieve the backup list too many times on
transport \Device\NetBT_Tcpip_{545667B9-EFC9-40D3-8481-30B52E610524}. The
backup browser is stopping.

For the majority of times, Running 'browstat status' on one of the member
servers returns:
Status for domain SOREX on transport
\Device\NetBT_Tcpip_{A40CA08F-9F80-4C2C-B6B5-CE92893B708A}
Browsing is active on domain.
Master browser name is: SOREX50
Master browser is running build 3790
3 backup servers retrieved from master SOREX50
\\SOREX200
\\SOREX50
\\SOREX3
There are 49 servers in domain SOREX on transport
\Device\NetBT_Tcpip_{A40CA08F-9F80-4C2C-B6B5-CE92893B708A}
There are 2 domains in domain SOREX on transport
\Device\NetBT_Tcpip_{A40CA08F-9F80-4C2C-B6B5-CE92893B708A}

However, the other times, it returns:
Status for domain SOREX on transport
\Device\NetBT_Tcpip_{A40CA08F-9F80-4C2C-B6B5-CE92893B708A}
Browsing is active on domain.
Master browser name is: SOREX50
Master browser is running build 3790
3 backup servers retrieved from master SOREX50
\\SOREX3
\\SOREX200
\\SOREX50
Unable to retrieve server list from SOREX50: 64


I've also run 'browstat status' on the master browser DC and get the
following:

Status for domain SOREX on transport
\Device\NetBT_Tcpip_{A228F481-4F85-C14-ABF2-261D601805D4}
Browsing is active on domain.
Master browser name is: SOREX50
Master browser is running build 3790
3 backup servers retrieved from master SOREX50
\\SOREX3
\\SOREX200
\\SOREX50
There are 49 servers in domain SOREX on transport
\Device\NetBT_Tcpip_{A228F481-4F85-4C14-ABF2-261D601805D4}
There are 2 domains in domain SOREX on transport
\Device\NetBT_Tcpip_{A228F481-4F85-4C14-ABF2-261D601805D4}

Status for domain SOREX on transport
\Device\NetBT_Tcpip_{1F4863A1-5EB2-4910-B37C-C9C7C72BEC43}
Browsing is active on domain.
Master name cannot be determined from GetAdapterStatus. Using \\SOREX50
Master browser is running build 3790
1 backup servers retrieved from master SOREX50
\\SOREX50
There are 0 servers in domain SOREX on transport
\Device\NetBT_Tcpip_{1F4863A1-5EB2-4910-B37C-C9C7C72BEC43}
There are 0 domains in domain SOREX on transport
\Device\NetBT_Tcpip_{1F4863A1-5EB2-4910-B37C-C9C7C72BEC43}

The first thing that worries me from this, is "There are 2 domains in domain
SOREX on transport...." As far as I know, I only have 1 domain!

Also, and I don't know if this is relevent or not, the status for the
"second" device refers to (looking into
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters) NdisWanIp
I think this is to do with Remote Access, as I have the Master Browser DC
set up as a Remote Access Server with 2 modems to dialin.

Is there a known issue with having a Master Browser as a RAS server? Or am I
looking at this the wrong way?

Would appreciate any answers,

Regards,
An IT tech who's in at the deep end here!

Yes, having browser problems with RRAS running on a master browser is
certainly a known issue. As soon as a remote user connects, the DC becomes
multihomed when the internal RRAS interface gets an additional IP from the
pool. If the browser service tries to get a browse list using the "wrong" IP
it will fail, and cause the problem you are seeing.

The best solution is not to run RRAS on the DC. If you must run it there
you need to prevent the IP of the internal interface being associated with
the machine name. Disabling Netbios over TCP/IP on the internal interface
will normally fix it. If you are running WINS you also have to clear out any
stored references to the "wrong" IP.

See KB 292822. The references to Netbios names is near the end. Dynamic
DNS can cause the same problems (as discussed in the first part of the KB).

"jammiedodger80" <jammiedodger80@discussions.microsoft.com> wrote in message
news:9CD63F0B-8BE2-41BE-9B54-396662C2ABFE@microsoft.com...
> I'm running a Windows 2003 native domain (was originally an NT domain a
> few
> years ago) with 2 x DCs, 4 member servers and roughly 50 clients.
>
> My 'original' DC which holds the FSMO roles is the Master Browser.
> On virtually all other computers in the domain, the Event Logs are
> throwing up
>
> Event Source: BROWSER
> Event Category: None
> Event ID: 8032
> Description:
> The browser service has failed to retrieve the backup list too many times
> on
> transport \Device\NetBT_Tcpip_{545667B9-EFC9-40D3-8481-30B52E610524}. The
> backup browser is stopping.
>
> For the majority of times, Running 'browstat status' on one of the member
> servers returns:
> Status for domain SOREX on transport
> \Device\NetBT_Tcpip_{A40CA08F-9F80-4C2C-B6B5-CE92893B708A}
> Browsing is active on domain.
> Master browser name is: SOREX50
> Master browser is running build 3790
> 3 backup servers retrieved from master SOREX50
> \\SOREX200
> \\SOREX50
> \\SOREX3
> There are 49 servers in domain SOREX on transport
> \Device\NetBT_Tcpip_{A40CA08F-9F80-4C2C-B6B5-CE92893B708A}
> There are 2 domains in domain SOREX on transport
> \Device\NetBT_Tcpip_{A40CA08F-9F80-4C2C-B6B5-CE92893B708A}
>
> However, the other times, it returns:
> Status for domain SOREX on transport
> \Device\NetBT_Tcpip_{A40CA08F-9F80-4C2C-B6B5-CE92893B708A}
> Browsing is active on domain.
> Master browser name is: SOREX50
> Master browser is running build 3790
> 3 backup servers retrieved from master SOREX50
> \\SOREX3
> \\SOREX200
> \\SOREX50
> Unable to retrieve server list from SOREX50: 64
>
>
> I've also run 'browstat status' on the master browser DC and get the
> following:
>
> Status for domain SOREX on transport
> \Device\NetBT_Tcpip_{A228F481-4F85-C14-ABF2-261D601805D4}
> Browsing is active on domain.
> Master browser name is: SOREX50
> Master browser is running build 3790
> 3 backup servers retrieved from master SOREX50
> \\SOREX3
> \\SOREX200
> \\SOREX50
> There are 49 servers in domain SOREX on transport
> \Device\NetBT_Tcpip_{A228F481-4F85-4C14-ABF2-261D601805D4}
> There are 2 domains in domain SOREX on transport
> \Device\NetBT_Tcpip_{A228F481-4F85-4C14-ABF2-261D601805D4}
>
> Status for domain SOREX on transport
> \Device\NetBT_Tcpip_{1F4863A1-5EB2-4910-B37C-C9C7C72BEC43}
> Browsing is active on domain.
> Master name cannot be determined from GetAdapterStatus. Using
> \\SOREX50
> Master browser is running build 3790
> 1 backup servers retrieved from master SOREX50
> \\SOREX50
> There are 0 servers in domain SOREX on transport
> \Device\NetBT_Tcpip_{1F4863A1-5EB2-4910-B37C-C9C7C72BEC43}
> There are 0 domains in domain SOREX on transport
> \Device\NetBT_Tcpip_{1F4863A1-5EB2-4910-B37C-C9C7C72BEC43}
>
> The first thing that worries me from this, is "There are 2 domains in
> domain
> SOREX on transport...." As far as I know, I only have 1 domain!
>
> Also, and I don't know if this is relevent or not, the status for the
> "second" device refers to (looking into
> HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters)
> NdisWanIp
> I think this is to do with Remote Access, as I have the Master Browser DC
> set up as a Remote Access Server with 2 modems to dialin.
>
> Is there a known issue with having a Master Browser as a RAS server? Or am
> I
> looking at this the wrong way?
>
> Would appreciate any answers,
>
> Regards,
> An IT tech who's in at the deep end here!

Yes, that's worked.

Thank you very much.

"Bill Grant" wrote:

> Yes, having browser problems with RRAS running on a master browser is
> certainly a known issue. As soon as a remote user connects, the DC becomes
> multihomed when the internal RRAS interface gets an additional IP from the
> pool. If the browser service tries to get a browse list using the "wrong" IP
> it will fail, and cause the problem you are seeing.
>
> The best solution is not to run RRAS on the DC. If you must run it there
> you need to prevent the IP of the internal interface being associated with
> the machine name. Disabling Netbios over TCP/IP on the internal interface
> will normally fix it. If you are running WINS you also have to clear out any
> stored references to the "wrong" IP.
>
> See KB 292822. The references to Netbios names is near the end. Dynamic
> DNS can cause the same problems (as discussed in the first part of the KB).
>
> "jammiedodger80" <jammiedodger80@discussions.microsoft.com> wrote in message
> news:9CD63F0B-8BE2-41BE-9B54-396662C2ABFE@microsoft.com...
> > I'm running a Windows 2003 native domain (was originally an NT domain a
> > few
> > years ago) with 2 x DCs, 4 member servers and roughly 50 clients.
> >
> > My 'original' DC which holds the FSMO roles is the Master Browser.
> > On virtually all other computers in the domain, the Event Logs are
> > throwing up
> >
> > Event Source: BROWSER
> > Event Category: None
> > Event ID: 8032
> > Description:
> > The browser service has failed to retrieve the backup list too many times
> > on
> > transport \Device\NetBT_Tcpip_{545667B9-EFC9-40D3-8481-30B52E610524}. The
> > backup browser is stopping.
> >
> > For the majority of times, Running 'browstat status' on one of the member
> > servers returns:
> > Status for domain SOREX on transport
> > \Device\NetBT_Tcpip_{A40CA08F-9F80-4C2C-B6B5-CE92893B708A}
> > Browsing is active on domain.
> > Master browser name is: SOREX50
> > Master browser is running build 3790
> > 3 backup servers retrieved from master SOREX50
> > \\SOREX200
> > \\SOREX50
> > \\SOREX3
> > There are 49 servers in domain SOREX on transport
> > \Device\NetBT_Tcpip_{A40CA08F-9F80-4C2C-B6B5-CE92893B708A}
> > There are 2 domains in domain SOREX on transport
> > \Device\NetBT_Tcpip_{A40CA08F-9F80-4C2C-B6B5-CE92893B708A}
> >
> > However, the other times, it returns:
> > Status for domain SOREX on transport
> > \Device\NetBT_Tcpip_{A40CA08F-9F80-4C2C-B6B5-CE92893B708A}
> > Browsing is active on domain.
> > Master browser name is: SOREX50
> > Master browser is running build 3790
> > 3 backup servers retrieved from master SOREX50
> > \\SOREX3
> > \\SOREX200
> > \\SOREX50
> > Unable to retrieve server list from SOREX50: 64
> >
> >
> > I've also run 'browstat status' on the master browser DC and get the
> > following:
> >
> > Status for domain SOREX on transport
> > \Device\NetBT_Tcpip_{A228F481-4F85-C14-ABF2-261D601805D4}
> > Browsing is active on domain.
> > Master browser name is: SOREX50
> > Master browser is running build 3790
> > 3 backup servers retrieved from master SOREX50
> > \\SOREX3
> > \\SOREX200
> > \\SOREX50
> > There are 49 servers in domain SOREX on transport
> > \Device\NetBT_Tcpip_{A228F481-4F85-4C14-ABF2-261D601805D4}
> > There are 2 domains in domain SOREX on transport
> > \Device\NetBT_Tcpip_{A228F481-4F85-4C14-ABF2-261D601805D4}
> >
> > Status for domain SOREX on transport
> > \Device\NetBT_Tcpip_{1F4863A1-5EB2-4910-B37C-C9C7C72BEC43}
> > Browsing is active on domain.
> > Master name cannot be determined from GetAdapterStatus. Using
> > \\SOREX50
> > Master browser is running build 3790
> > 1 backup servers retrieved from master SOREX50
> > \\SOREX50
> > There are 0 servers in domain SOREX on transport
> > \Device\NetBT_Tcpip_{1F4863A1-5EB2-4910-B37C-C9C7C72BEC43}
> > There are 0 domains in domain SOREX on transport
> > \Device\NetBT_Tcpip_{1F4863A1-5EB2-4910-B37C-C9C7C72BEC43}
> >
> > The first thing that worries me from this, is "There are 2 domains in
> > domain
> > SOREX on transport...." As far as I know, I only have 1 domain!
> >
> > Also, and I don't know if this is relevent or not, the status for the
> > "second" device refers to (looking into
> > HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters)
> > NdisWanIp
> > I think this is to do with Remote Access, as I have the Master Browser DC
> > set up as a Remote Access Server with 2 modems to dialin.
> >
> > Is there a known issue with having a Master Browser as a RAS server? Or am
> > I
> > looking at this the wrong way?
> >
> > Would appreciate any answers,
> >
> > Regards,
> > An IT tech who's in at the deep end here!
>
>