DC's Missing From Browse List

Group,

I am looking after a Windows 2003 AD Domain and a few weeks ago the Domain
Comtrollers all dropped off the browse list. I have read through a lot of
material on similar problems and can find no way to resolve the problem so i
am asking for any suggestions you may have.

The Setup ...

All the computers in the Domain are on the same subnet, the DC's can be
accessed via the run command snd drives can be mapped to them. The master
browser on the subnet is the PDC emulator which is set to be the DomainMsster.

As the Doamin is small each of the domain controller runs AD, DHCP, WINS and
DNS, this has always been the case, long before the problems started.

Any Thoughts ...

Alan

Have there been any configuration changes lately such as changing security
policy or adding a network adapter to a domain controller?? Multi homed
domain controllers [or being a remote access server] are the biggest cause
of browsing problems. I would run the command " nbtstat -n " to make sure
each dc shows at least three registered names and check the Event Viewer
logs to see if any browse list related problems are reported. Verify that
each domain controller is also a wins client, which would be itself in your
case. You can use the browstat tool to troubleshoot browse problems. Run "
browstat status " for instance to find out the names of the master
browsers. --- Steve

http://www.petri.co.il/download_free_reskit_tools.htm --- download
browstat here.

"Alan Ruddock" <(E-Mail Removed)> wrote in message
news:443680E0-8147-4A65-A8C8-(E-Mail Removed)...
> Group,
>
> I am looking after a Windows 2003 AD Domain and a few weeks ago the Domain
> Comtrollers all dropped off the browse list. I have read through a lot of
> material on similar problems and can find no way to resolve the problem so
> i
> am asking for any suggestions you may have.
>
> The Setup ...
>
> All the computers in the Domain are on the same subnet, the DC's can be
> accessed via the run command snd drives can be mapped to them. The master
> browser on the subnet is the PDC emulator which is set to be the
> DomainMsster.
>
> As the Doamin is small each of the domain controller runs AD, DHCP, WINS
> and
> DNS, this has always been the case, long before the problems started.
>
> Any Thoughts ...
>
> Alan

Steven,

Firstly thanks for your time, answers to your questions follow ...

There were no changes i know of at the time the DCs dissapeared from the
browse list (althought obviously something has happened).

I should have mentioned earlier that one of the DCs is a RAS Server. This
has been the case for a long time though and the problems are recent.

All event logs on both machines are clear.

The results of nbtstat -n and browstat status follow ....

On DC01 the PDC emulator ...
----------------------------------------------------------------

C:\>nbtstat -a DC01

Local Area Connection:
Node IpAddress: [10.x.x.205] Scope Id: []

NetBIOS Remote Machine Name Table

Name Type Status
---------------------------------------------
DC01 <00> UNIQUE Registered
MYDOMAIN <00> GROUP Registered
MYDOMAIN <1C> GROUP Registered
DC01 <20> UNIQUE Registered
MYDOMAIN <1B> UNIQUE Registered
DC01 <03> UNIQUE Registered
MYDOMAIN <1E> GROUP Registered
MYDOMAIN <1D> UNIQUE Registered
..__MSBROWSE__.<01> GROUP Registered

MAC Address = 00-30-6E-06-8F-55

C:\>nbtstat -a DC02

Local Area Connection:
Node IpAddress: [10.x.x.205] Scope Id: []

NetBIOS Remote Machine Name Table

Name Type Status
---------------------------------------------
DC02 <00> UNIQUE Registered
MYDOMAIN <00> GROUP Registered
MYDOMAIN <1C> GROUP Registered
DC02 <20> UNIQUE Registered
MYDOMAIN <1E> GROUP Registered

MAC Address = 00-30-6E-06-2F-DB

C:\>browstat status

Status for domain MYDOMAIN on transport
\Device\NetBT_Tcpip_{2F99145C-8DCD-400F-8
A8A-5F53723EDF5A}
Browsing is active on domain.
Master browser name is: DC01
Master browser is running build 3790
2 backup servers retrieved from master DC01
\\SVR01
\\DC01
There are 43 servers in domain MYDOMAIN on transport
\Device\NetBT_Tcpip_{2F9
9145C-8DCD-400F-8A8A-5F53723EDF5A}
There are 4 domains in domain MYDOMAIN on transport
\Device\NetBT_Tcpip_{2F99
145C-8DCD-400F-8A8A-5F53723EDF5A}


On DC02 ...
-----------------------------------------------------------------

C:\>browstat status


Status for domain MYDOMAIN on transport
\Device\NetBT_Tcpip_{CC87E309-1AC7-4CAF-8
6CC-6C065140FD22}
Browsing is active on domain.
Master browser name is: DC02
Master browser is running build 3790
3 backup servers retrieved from master DC02
\\SVR01
\\WKD03
\\DC01
There are 43 servers in domain MYDOMAIN on transport
\Device\NetBT_Tcpip_{CC8
7E309-1AC7-4CAF-86CC-6C065140FD22}
There are 4 domains in domain MYDOMAIN on transport
\Device\NetBT_Tcpip_{CC87
E309-1AC7-4CAF-86CC-6C065140FD22}


Status for domain MYDOMAIN on transport
\Device\NetBT_Tcpip_{20A3573A-2A90-4E89-8
E3B-321DADEACD40}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.


On a workstation ...
-------------------------------------------------------------------------


Status for domain MYDOMAIN on transport
\Device\NetBT_Tcpip_{CFF558D9-D2CB-4F39-9
99D-9E4454CE4053}
Browsing is active on domain.
Master browser name is: DC02
Master browser is running build 3790
3 backup servers retrieved from master DC02
\\SVR01
\\DC01
\\WKD04
There are 43 servers in domain MYDOMAIN on transport
\Device\NetBT_Tcpip_{CFF
558D9-D2CB-4F39-999D-9E4454CE4053}
There are 4 domains in domain MYDOMAIN on transport
\Device\NetBT_Tcpip_{CFF5
58D9-D2CB-4F39-999D-9E4454CE4053}


Any further thoughts ...

Alan




"Steven L Umbach" wrote:

> Have there been any configuration changes lately such as changing security
> policy or adding a network adapter to a domain controller?? Multi homed
> domain controllers [or being a remote access server] are the biggest cause
> of browsing problems. I would run the command " nbtstat -n " to make sure
> each dc shows at least three registered names and check the Event Viewer
> logs to see if any browse list related problems are reported. Verify that
> each domain controller is also a wins client, which would be itself in your
> case. You can use the browstat tool to troubleshoot browse problems. Run "
> browstat status " for instance to find out the names of the master
> browsers. --- Steve
>
> http://www.petri.co.il/download_free_reskit_tools.htm --- download
> browstat here.
>
> "Alan Ruddock" <(E-Mail Removed)> wrote in message
> news:443680E0-8147-4A65-A8C8-(E-Mail Removed)...
> > Group,
> >
> > I am looking after a Windows 2003 AD Domain and a few weeks ago the Domain
> > Comtrollers all dropped off the browse list. I have read through a lot of
> > material on similar problems and can find no way to resolve the problem so
> > i
> > am asking for any suggestions you may have.
> >
> > The Setup ...
> >
> > All the computers in the Domain are on the same subnet, the DC's can be
> > accessed via the run command snd drives can be mapped to them. The master
> > browser on the subnet is the PDC emulator which is set to be the
> > DomainMsster.
> >
> > As the Doamin is small each of the domain controller runs AD, DHCP, WINS
> > and
> > DNS, this has always been the case, long before the problems started.
> >
> > Any Thoughts ...
> >
> > Alan
>
>
>

You seem to have a conflict in that both domain controllers believe that
they are the master browser and the workstation believes it is DC02 though
the nbtstat -n from DC01 shows it to be the domain master browser [1B,1D]. I
assume these domain controllers are on the same subnet as each subnet will
need it's own segment master browser. The link below explains the problems
that can arise from multi homed domain controllers and the browse list and
some solutions and other things to check. What I would suggest trying is to
stop the computer browser service on the domain controller that is a ras
server and set the startup to manual. That will prevent it from becoming a
master browser. If that domain controller is also the pdc fsmo, consider
transferring that role to another domain controller if at all possible. Also
verify that each domain controller can see itself when you use " net view "
command.

If you make some changes, do not expect the browse list to correct itself
right away but within a hour or so and if wins is used on the network run
the command " nbtstat -RR " being sure to use uppercase on the domain
controllers shortly after making the changes and check the wins database for
correct records and examine any static records for accuracy for the domain
controllers or master browsers if any, which normally there are not. I would
also check the lmhosts files on the domain controllers to make sure there
are not old entries used to map to the IP address of the PDC. It is curious
that there had not been a problem before but the whole browse list mechanism
is fickle to say the least. When I read Mark Minasi's Mastering Windows 2003
Server, he even admits he can not figure out browse list problems all the
time --- Steve

http://support.microsoft.com/default...b;en-us;135404 -- multi
homed master browser problems.
http://support.microsoft.com/kb/q163409/ -- explaination of netbios 16th
character that shows in wins database and with nbtstat -n.

"Alan Ruddock" <(E-Mail Removed)> wrote in message
news:0EA6971D-29F0-456F-BBF0-(E-Mail Removed)...
> Steven,
>
> Firstly thanks for your time, answers to your questions follow ...
>
> There were no changes i know of at the time the DCs dissapeared from the
> browse list (althought obviously something has happened).
>
> I should have mentioned earlier that one of the DCs is a RAS Server. This
> has been the case for a long time though and the problems are recent.
>
> All event logs on both machines are clear.
>
> The results of nbtstat -n and browstat status follow ....
>
> On DC01 the PDC emulator ...
> ----------------------------------------------------------------
>
> C:\>nbtstat -a DC01
>
> Local Area Connection:
> Node IpAddress: [10.x.x.205] Scope Id: []
>
> NetBIOS Remote Machine Name Table
>
> Name Type Status
> ---------------------------------------------
> DC01 <00> UNIQUE Registered
> MYDOMAIN <00> GROUP Registered
> MYDOMAIN <1C> GROUP Registered
> DC01 <20> UNIQUE Registered
> MYDOMAIN <1B> UNIQUE Registered
> DC01 <03> UNIQUE Registered
> MYDOMAIN <1E> GROUP Registered
> MYDOMAIN <1D> UNIQUE Registered
> ..__MSBROWSE__.<01> GROUP Registered
>
> MAC Address = 00-30-6E-06-8F-55
>
> C:\>nbtstat -a DC02
>
> Local Area Connection:
> Node IpAddress: [10.x.x.205] Scope Id: []
>
> NetBIOS Remote Machine Name Table
>
> Name Type Status
> ---------------------------------------------
> DC02 <00> UNIQUE Registered
> MYDOMAIN <00> GROUP Registered
> MYDOMAIN <1C> GROUP Registered
> DC02 <20> UNIQUE Registered
> MYDOMAIN <1E> GROUP Registered
>
> MAC Address = 00-30-6E-06-2F-DB
>
> C:\>browstat status
>
> Status for domain MYDOMAIN on transport
> \Device\NetBT_Tcpip_{2F99145C-8DCD-400F-8
> A8A-5F53723EDF5A}
> Browsing is active on domain.
> Master browser name is: DC01
> Master browser is running build 3790
> 2 backup servers retrieved from master DC01
> \\SVR01
> \\DC01
> There are 43 servers in domain MYDOMAIN on transport
> \Device\NetBT_Tcpip_{2F9
> 9145C-8DCD-400F-8A8A-5F53723EDF5A}
> There are 4 domains in domain MYDOMAIN on transport
> \Device\NetBT_Tcpip_{2F99
> 145C-8DCD-400F-8A8A-5F53723EDF5A}
>
>
> On DC02 ...
> -----------------------------------------------------------------
>
> C:\>browstat status
>
>
> Status for domain MYDOMAIN on transport
> \Device\NetBT_Tcpip_{CC87E309-1AC7-4CAF-8
> 6CC-6C065140FD22}
> Browsing is active on domain.
> Master browser name is: DC02
> Master browser is running build 3790
> 3 backup servers retrieved from master DC02
> \\SVR01
> \\WKD03
> \\DC01
> There are 43 servers in domain MYDOMAIN on transport
> \Device\NetBT_Tcpip_{CC8
> 7E309-1AC7-4CAF-86CC-6C065140FD22}
> There are 4 domains in domain MYDOMAIN on transport
> \Device\NetBT_Tcpip_{CC87
> E309-1AC7-4CAF-86CC-6C065140FD22}
>
>
> Status for domain MYDOMAIN on transport
> \Device\NetBT_Tcpip_{20A3573A-2A90-4E89-8
> E3B-321DADEACD40}
> Browsing is NOT active on domain.
> Master name cannot be determined from GetAdapterStatus.
>
>
> On a workstation ...
> -------------------------------------------------------------------------
>
>
> Status for domain MYDOMAIN on transport
> \Device\NetBT_Tcpip_{CFF558D9-D2CB-4F39-9
> 99D-9E4454CE4053}
> Browsing is active on domain.
> Master browser name is: DC02
> Master browser is running build 3790
> 3 backup servers retrieved from master DC02
> \\SVR01
> \\DC01
> \\WKD04
> There are 43 servers in domain MYDOMAIN on transport
> \Device\NetBT_Tcpip_{CFF
> 558D9-D2CB-4F39-999D-9E4454CE4053}
> There are 4 domains in domain MYDOMAIN on transport
> \Device\NetBT_Tcpip_{CFF5
> 58D9-D2CB-4F39-999D-9E4454CE4053}
>
>
> Any further thoughts ...
>
> Alan
>
>
>
>
> "Steven L Umbach" wrote:
>
>> Have there been any configuration changes lately such as changing
>> security
>> policy or adding a network adapter to a domain controller?? Multi homed
>> domain controllers [or being a remote access server] are the biggest
>> cause
>> of browsing problems. I would run the command " nbtstat -n " to make sure
>> each dc shows at least three registered names and check the Event Viewer
>> logs to see if any browse list related problems are reported. Verify
>> that
>> each domain controller is also a wins client, which would be itself in
>> your
>> case. You can use the browstat tool to troubleshoot browse problems. Run
>> "
>> browstat status " for instance to find out the names of the master
>> browsers. --- Steve
>>
>> http://www.petri.co.il/download_free_reskit_tools.htm --- download
>> browstat here.
>>
>> "Alan Ruddock" <(E-Mail Removed)> wrote in message
>> news:443680E0-8147-4A65-A8C8-(E-Mail Removed)...
>> > Group,
>> >
>> > I am looking after a Windows 2003 AD Domain and a few weeks ago the
>> > Domain
>> > Comtrollers all dropped off the browse list. I have read through a lot
>> > of
>> > material on similar problems and can find no way to resolve the problem
>> > so
>> > i
>> > am asking for any suggestions you may have.
>> >
>> > The Setup ...
>> >
>> > All the computers in the Domain are on the same subnet, the DC's can be
>> > accessed via the run command snd drives can be mapped to them. The
>> > master
>> > browser on the subnet is the PDC emulator which is set to be the
>> > DomainMsster.
>> >
>> > As the Doamin is small each of the domain controller runs AD, DHCP,
>> > WINS
>> > and
>> > DNS, this has always been the case, long before the problems started.
>> >
>> > Any Thoughts ...
>> >
>> > Alan
>>
>>
>>

Steve,

Amazingly that still has not fixed the problem.

I have stopped the browser service on the DC which is also a RAS server and
now browstat reports the other DC (PDC FSMO) as the master browser from all
machines i have tried.

I have run nbtstat -RR run on each DC, both lmhosts files are clean, the
net view command returns correctly for both DC's when run from anywhere and
they are accessible via a UNC path typed into the run command.

Still however they are not on the browse list.

Is there a setting i do not know about on DC's (perhapse a recent security
patch) which hides them from the browse list ?? Its all i can come up with ...

Alan






"Steven L Umbach" wrote:

> You seem to have a conflict in that both domain controllers believe that
> they are the master browser and the workstation believes it is DC02 though
> the nbtstat -n from DC01 shows it to be the domain master browser [1B,1D]. I
> assume these domain controllers are on the same subnet as each subnet will
> need it's own segment master browser. The link below explains the problems
> that can arise from multi homed domain controllers and the browse list and
> some solutions and other things to check. What I would suggest trying is to
> stop the computer browser service on the domain controller that is a ras
> server and set the startup to manual. That will prevent it from becoming a
> master browser. If that domain controller is also the pdc fsmo, consider
> transferring that role to another domain controller if at all possible. Also
> verify that each domain controller can see itself when you use " net view "
> command.
>
> If you make some changes, do not expect the browse list to correct itself
> right away but within a hour or so and if wins is used on the network run
> the command " nbtstat -RR " being sure to use uppercase on the domain
> controllers shortly after making the changes and check the wins database for
> correct records and examine any static records for accuracy for the domain
> controllers or master browsers if any, which normally there are not. I would
> also check the lmhosts files on the domain controllers to make sure there
> are not old entries used to map to the IP address of the PDC. It is curious
> that there had not been a problem before but the whole browse list mechanism
> is fickle to say the least. When I read Mark Minasi's Mastering Windows 2003
> Server, he even admits he can not figure out browse list problems all the
> time --- Steve
>
> http://support.microsoft.com/default...b;en-us;135404 -- multi
> homed master browser problems.
> http://support.microsoft.com/kb/q163409/ -- explaination of netbios 16th
> character that shows in wins database and with nbtstat -n.
>
> "Alan Ruddock" <(E-Mail Removed)> wrote in message
> news:0EA6971D-29F0-456F-BBF0-(E-Mail Removed)...
> > Steven,
> >
> > Firstly thanks for your time, answers to your questions follow ...
> >
> > There were no changes i know of at the time the DCs dissapeared from the
> > browse list (althought obviously something has happened).
> >
> > I should have mentioned earlier that one of the DCs is a RAS Server. This
> > has been the case for a long time though and the problems are recent.
> >
> > All event logs on both machines are clear.
> >
> > The results of nbtstat -n and browstat status follow ....
> >
> > On DC01 the PDC emulator ...
> > ----------------------------------------------------------------
> >
> > C:\>nbtstat -a DC01
> >
> > Local Area Connection:
> > Node IpAddress: [10.x.x.205] Scope Id: []
> >
> > NetBIOS Remote Machine Name Table
> >
> > Name Type Status
> > ---------------------------------------------
> > DC01 <00> UNIQUE Registered
> > MYDOMAIN <00> GROUP Registered
> > MYDOMAIN <1C> GROUP Registered
> > DC01 <20> UNIQUE Registered
> > MYDOMAIN <1B> UNIQUE Registered
> > DC01 <03> UNIQUE Registered
> > MYDOMAIN <1E> GROUP Registered
> > MYDOMAIN <1D> UNIQUE Registered
> > ..__MSBROWSE__.<01> GROUP Registered
> >
> > MAC Address = 00-30-6E-06-8F-55
> >
> > C:\>nbtstat -a DC02
> >
> > Local Area Connection:
> > Node IpAddress: [10.x.x.205] Scope Id: []
> >
> > NetBIOS Remote Machine Name Table
> >
> > Name Type Status
> > ---------------------------------------------
> > DC02 <00> UNIQUE Registered
> > MYDOMAIN <00> GROUP Registered
> > MYDOMAIN <1C> GROUP Registered
> > DC02 <20> UNIQUE Registered
> > MYDOMAIN <1E> GROUP Registered
> >
> > MAC Address = 00-30-6E-06-2F-DB
> >
> > C:\>browstat status
> >
> > Status for domain MYDOMAIN on transport
> > \Device\NetBT_Tcpip_{2F99145C-8DCD-400F-8
> > A8A-5F53723EDF5A}
> > Browsing is active on domain.
> > Master browser name is: DC01
> > Master browser is running build 3790
> > 2 backup servers retrieved from master DC01
> > \\SVR01
> > \\DC01
> > There are 43 servers in domain MYDOMAIN on transport
> > \Device\NetBT_Tcpip_{2F9
> > 9145C-8DCD-400F-8A8A-5F53723EDF5A}
> > There are 4 domains in domain MYDOMAIN on transport
> > \Device\NetBT_Tcpip_{2F99
> > 145C-8DCD-400F-8A8A-5F53723EDF5A}
> >
> >
> > On DC02 ...
> > -----------------------------------------------------------------
> >
> > C:\>browstat status
> >
> >
> > Status for domain MYDOMAIN on transport
> > \Device\NetBT_Tcpip_{CC87E309-1AC7-4CAF-8
> > 6CC-6C065140FD22}
> > Browsing is active on domain.
> > Master browser name is: DC02
> > Master browser is running build 3790
> > 3 backup servers retrieved from master DC02
> > \\SVR01
> > \\WKD03
> > \\DC01
> > There are 43 servers in domain MYDOMAIN on transport
> > \Device\NetBT_Tcpip_{CC8
> > 7E309-1AC7-4CAF-86CC-6C065140FD22}
> > There are 4 domains in domain MYDOMAIN on transport
> > \Device\NetBT_Tcpip_{CC87
> > E309-1AC7-4CAF-86CC-6C065140FD22}
> >
> >
> > Status for domain MYDOMAIN on transport
> > \Device\NetBT_Tcpip_{20A3573A-2A90-4E89-8
> > E3B-321DADEACD40}
> > Browsing is NOT active on domain.
> > Master name cannot be determined from GetAdapterStatus.
> >
> >
> > On a workstation ...
> > -------------------------------------------------------------------------
> >
> >
> > Status for domain MYDOMAIN on transport
> > \Device\NetBT_Tcpip_{CFF558D9-D2CB-4F39-9
> > 99D-9E4454CE4053}
> > Browsing is active on domain.
> > Master browser name is: DC02
> > Master browser is running build 3790
> > 3 backup servers retrieved from master DC02
> > \\SVR01
> > \\DC01
> > \\WKD04
> > There are 43 servers in domain MYDOMAIN on transport
> > \Device\NetBT_Tcpip_{CFF
> > 558D9-D2CB-4F39-999D-9E4454CE4053}
> > There are 4 domains in domain MYDOMAIN on transport
> > \Device\NetBT_Tcpip_{CFF5
> > 58D9-D2CB-4F39-999D-9E4454CE4053}
> >
> >
> > Any further thoughts ...
> >
> > Alan
> >
> >
> >
> >
> > "Steven L Umbach" wrote:
> >
> >> Have there been any configuration changes lately such as changing
> >> security
> >> policy or adding a network adapter to a domain controller?? Multi homed
> >> domain controllers [or being a remote access server] are the biggest
> >> cause
> >> of browsing problems. I would run the command " nbtstat -n " to make sure
> >> each dc shows at least three registered names and check the Event Viewer
> >> logs to see if any browse list related problems are reported. Verify
> >> that
> >> each domain controller is also a wins client, which would be itself in
> >> your
> >> case. You can use the browstat tool to troubleshoot browse problems. Run
> >> "
> >> browstat status " for instance to find out the names of the master
> >> browsers. --- Steve
> >>
> >> http://www.petri.co.il/download_free_reskit_tools.htm --- download
> >> browstat here.
> >>
> >> "Alan Ruddock" <(E-Mail Removed)> wrote in message
> >> news:443680E0-8147-4A65-A8C8-(E-Mail Removed)...
> >> > Group,
> >> >
> >> > I am looking after a Windows 2003 AD Domain and a few weeks ago the
> >> > Domain
> >> > Comtrollers all dropped off the browse list. I have read through a lot
> >> > of
> >> > material on similar problems and can find no way to resolve the problem
> >> > so
> >> > i
> >> > am asking for any suggestions you may have.
> >> >
> >> > The Setup ...
> >> >
> >> > All the computers in the Domain are on the same subnet, the DC's can be
> >> > accessed via the run command snd drives can be mapped to them. The
> >> > master
> >> > browser on the subnet is the PDC emulator which is set to be the
> >> > DomainMsster.
> >> >
> >> > As the Doamin is small each of the domain controller runs AD, DHCP,
> >> > WINS
> >> > and
> >> > DNS, this has always been the case, long before the problems started.
> >> >
> >> > Any Thoughts ...
> >> >
> >> > Alan
> >>
> >>
> >>
>
>
>

An update after further testing ...

net view <dcname>

brings back the correct information for the DC

net view

Does not return the DC's in the list of computers

Alan


"Alan Ruddock" wrote:

> Steve,
>
> Amazingly that still has not fixed the problem.
>
> I have stopped the browser service on the DC which is also a RAS server and
> now browstat reports the other DC (PDC FSMO) as the master browser from all
> machines i have tried.
>
> I have run nbtstat -RR run on each DC, both lmhosts files are clean, the
> net view command returns correctly for both DC's when run from anywhere and
> they are accessible via a UNC path typed into the run command.
>
> Still however they are not on the browse list.
>
> Is there a setting i do not know about on DC's (perhapse a recent security
> patch) which hides them from the browse list ?? Its all i can come up with ...
>
> Alan
>
>
>
>
>
>
> "Steven L Umbach" wrote:
>
> > You seem to have a conflict in that both domain controllers believe that
> > they are the master browser and the workstation believes it is DC02 though
> > the nbtstat -n from DC01 shows it to be the domain master browser [1B,1D]. I
> > assume these domain controllers are on the same subnet as each subnet will
> > need it's own segment master browser. The link below explains the problems
> > that can arise from multi homed domain controllers and the browse list and
> > some solutions and other things to check. What I would suggest trying is to
> > stop the computer browser service on the domain controller that is a ras
> > server and set the startup to manual. That will prevent it from becoming a
> > master browser. If that domain controller is also the pdc fsmo, consider
> > transferring that role to another domain controller if at all possible. Also
> > verify that each domain controller can see itself when you use " net view "
> > command.
> >
> > If you make some changes, do not expect the browse list to correct itself
> > right away but within a hour or so and if wins is used on the network run
> > the command " nbtstat -RR " being sure to use uppercase on the domain
> > controllers shortly after making the changes and check the wins database for
> > correct records and examine any static records for accuracy for the domain
> > controllers or master browsers if any, which normally there are not. I would
> > also check the lmhosts files on the domain controllers to make sure there
> > are not old entries used to map to the IP address of the PDC. It is curious
> > that there had not been a problem before but the whole browse list mechanism
> > is fickle to say the least. When I read Mark Minasi's Mastering Windows 2003
> > Server, he even admits he can not figure out browse list problems all the
> > time --- Steve
> >
> > http://support.microsoft.com/default...b;en-us;135404 -- multi
> > homed master browser problems.
> > http://support.microsoft.com/kb/q163409/ -- explaination of netbios 16th
> > character that shows in wins database and with nbtstat -n.
> >
> > "Alan Ruddock" <(E-Mail Removed)> wrote in message
> > news:0EA6971D-29F0-456F-BBF0-(E-Mail Removed)...
> > > Steven,
> > >
> > > Firstly thanks for your time, answers to your questions follow ...
> > >
> > > There were no changes i know of at the time the DCs dissapeared from the
> > > browse list (althought obviously something has happened).
> > >
> > > I should have mentioned earlier that one of the DCs is a RAS Server. This
> > > has been the case for a long time though and the problems are recent.
> > >
> > > All event logs on both machines are clear.
> > >
> > > The results of nbtstat -n and browstat status follow ....
> > >
> > > On DC01 the PDC emulator ...
> > > ----------------------------------------------------------------
> > >
> > > C:\>nbtstat -a DC01
> > >
> > > Local Area Connection:
> > > Node IpAddress: [10.x.x.205] Scope Id: []
> > >
> > > NetBIOS Remote Machine Name Table
> > >
> > > Name Type Status
> > > ---------------------------------------------
> > > DC01 <00> UNIQUE Registered
> > > MYDOMAIN <00> GROUP Registered
> > > MYDOMAIN <1C> GROUP Registered
> > > DC01 <20> UNIQUE Registered
> > > MYDOMAIN <1B> UNIQUE Registered
> > > DC01 <03> UNIQUE Registered
> > > MYDOMAIN <1E> GROUP Registered
> > > MYDOMAIN <1D> UNIQUE Registered
> > > ..__MSBROWSE__.<01> GROUP Registered
> > >
> > > MAC Address = 00-30-6E-06-8F-55
> > >
> > > C:\>nbtstat -a DC02
> > >
> > > Local Area Connection:
> > > Node IpAddress: [10.x.x.205] Scope Id: []
> > >
> > > NetBIOS Remote Machine Name Table
> > >
> > > Name Type Status
> > > ---------------------------------------------
> > > DC02 <00> UNIQUE Registered
> > > MYDOMAIN <00> GROUP Registered
> > > MYDOMAIN <1C> GROUP Registered
> > > DC02 <20> UNIQUE Registered
> > > MYDOMAIN <1E> GROUP Registered
> > >
> > > MAC Address = 00-30-6E-06-2F-DB
> > >
> > > C:\>browstat status
> > >
> > > Status for domain MYDOMAIN on transport
> > > \Device\NetBT_Tcpip_{2F99145C-8DCD-400F-8
> > > A8A-5F53723EDF5A}
> > > Browsing is active on domain.
> > > Master browser name is: DC01
> > > Master browser is running build 3790
> > > 2 backup servers retrieved from master DC01
> > > \\SVR01
> > > \\DC01
> > > There are 43 servers in domain MYDOMAIN on transport
> > > \Device\NetBT_Tcpip_{2F9
> > > 9145C-8DCD-400F-8A8A-5F53723EDF5A}
> > > There are 4 domains in domain MYDOMAIN on transport
> > > \Device\NetBT_Tcpip_{2F99
> > > 145C-8DCD-400F-8A8A-5F53723EDF5A}
> > >
> > >
> > > On DC02 ...
> > > -----------------------------------------------------------------
> > >
> > > C:\>browstat status
> > >
> > >
> > > Status for domain MYDOMAIN on transport
> > > \Device\NetBT_Tcpip_{CC87E309-1AC7-4CAF-8
> > > 6CC-6C065140FD22}
> > > Browsing is active on domain.
> > > Master browser name is: DC02
> > > Master browser is running build 3790
> > > 3 backup servers retrieved from master DC02
> > > \\SVR01
> > > \\WKD03
> > > \\DC01
> > > There are 43 servers in domain MYDOMAIN on transport
> > > \Device\NetBT_Tcpip_{CC8
> > > 7E309-1AC7-4CAF-86CC-6C065140FD22}
> > > There are 4 domains in domain MYDOMAIN on transport
> > > \Device\NetBT_Tcpip_{CC87
> > > E309-1AC7-4CAF-86CC-6C065140FD22}
> > >
> > >
> > > Status for domain MYDOMAIN on transport
> > > \Device\NetBT_Tcpip_{20A3573A-2A90-4E89-8
> > > E3B-321DADEACD40}
> > > Browsing is NOT active on domain.
> > > Master name cannot be determined from GetAdapterStatus.
> > >
> > >
> > > On a workstation ...
> > > -------------------------------------------------------------------------
> > >
> > >
> > > Status for domain MYDOMAIN on transport
> > > \Device\NetBT_Tcpip_{CFF558D9-D2CB-4F39-9
> > > 99D-9E4454CE4053}
> > > Browsing is active on domain.
> > > Master browser name is: DC02
> > > Master browser is running build 3790
> > > 3 backup servers retrieved from master DC02
> > > \\SVR01
> > > \\DC01
> > > \\WKD04
> > > There are 43 servers in domain MYDOMAIN on transport
> > > \Device\NetBT_Tcpip_{CFF
> > > 558D9-D2CB-4F39-999D-9E4454CE4053}
> > > There are 4 domains in domain MYDOMAIN on transport
> > > \Device\NetBT_Tcpip_{CFF5
> > > 58D9-D2CB-4F39-999D-9E4454CE4053}
> > >
> > >
> > > Any further thoughts ...
> > >
> > > Alan
> > >
> > >
> > >
> > >
> > > "Steven L Umbach" wrote:
> > >
> > >> Have there been any configuration changes lately such as changing
> > >> security
> > >> policy or adding a network adapter to a domain controller?? Multi homed
> > >> domain controllers [or being a remote access server] are the biggest
> > >> cause
> > >> of browsing problems. I would run the command " nbtstat -n " to make sure
> > >> each dc shows at least three registered names and check the Event Viewer
> > >> logs to see if any browse list related problems are reported. Verify
> > >> that
> > >> each domain controller is also a wins client, which would be itself in
> > >> your
> > >> case. You can use the browstat tool to troubleshoot browse problems. Run
> > >> "
> > >> browstat status " for instance to find out the names of the master
> > >> browsers. --- Steve
> > >>
> > >> http://www.petri.co.il/download_free_reskit_tools.htm --- download
> > >> browstat here.
> > >>
> > >> "Alan Ruddock" <(E-Mail Removed)> wrote in message
> > >> news:443680E0-8147-4A65-A8C8-(E-Mail Removed)...
> > >> > Group,
> > >> >
> > >> > I am looking after a Windows 2003 AD Domain and a few weeks ago the
> > >> > Domain
> > >> > Comtrollers all dropped off the browse list. I have read through a lot
> > >> > of
> > >> > material on similar problems and can find no way to resolve the problem
> > >> > so
> > >> > i
> > >> > am asking for any suggestions you may have.
> > >> >
> > >> > The Setup ...
> > >> >
> > >> > All the computers in the Domain are on the same subnet, the DC's can be
> > >> > accessed via the run command snd drives can be mapped to them. The
> > >> > master
> > >> > browser on the subnet is the PDC emulator which is set to be the
> > >> > DomainMsster.
> > >> >
> > >> > As the Doamin is small each of the domain controller runs AD, DHCP,
> > >> > WINS
> > >> > and
> > >> > DNS, this has always been the case, long before the problems started.
> > >> >
> > >> > Any Thoughts ...
> > >> >
> > >> > Alan
> > >>
> > >>
> > >>
> >
> >
> >

Like I said, browse list problems can be a real PIA. Run the command net
config server on both of them to make sure they are not reported as being
hidden. I would also run the support tool netdiag on both of the dc's to see
if anything unusual is reported. Note that it is not unusual for netdiag to
complain that workstation service is not bound to any adapter for whatever
reason but I always still like to use it. I am keeping my fingers crossed
that this will sort itself out with time as I am about out of ideas also. Oh
one more thing I just though of, open Local Security Policy on the two
domain controllers and make sure that the security option for "additional
restrictions for anonymous access" is NOT set to "no access without explicit
anonymous permissions". Look under security settings/local polices/security
options. See the KB link below for more info on how this setting can cause
browse problems and the associated registry key that you may want to
check.--- Steve

http://support.microsoft.com/?kbid=246261 -- make sure this setting is NOT
enabled.

"Alan Ruddock" <(E-Mail Removed)> wrote in message
news:7A443091-A8C9-4722-8206-(E-Mail Removed)...
> Steve,
>
> Amazingly that still has not fixed the problem.
>
> I have stopped the browser service on the DC which is also a RAS server
> and
> now browstat reports the other DC (PDC FSMO) as the master browser from
> all
> machines i have tried.
>
> I have run nbtstat -RR run on each DC, both lmhosts files are clean, the
> net view command returns correctly for both DC's when run from anywhere
> and
> they are accessible via a UNC path typed into the run command.
>
> Still however they are not on the browse list.
>
> Is there a setting i do not know about on DC's (perhapse a recent security
> patch) which hides them from the browse list ?? Its all i can come up with
> ...
>
> Alan
>
>
>
>
>
>
> "Steven L Umbach" wrote:
>
>> You seem to have a conflict in that both domain controllers believe that
>> they are the master browser and the workstation believes it is DC02
>> though
>> the nbtstat -n from DC01 shows it to be the domain master browser
>> [1B,1D]. I
>> assume these domain controllers are on the same subnet as each subnet
>> will
>> need it's own segment master browser. The link below explains the
>> problems
>> that can arise from multi homed domain controllers and the browse list
>> and
>> some solutions and other things to check. What I would suggest trying is
>> to
>> stop the computer browser service on the domain controller that is a ras
>> server and set the startup to manual. That will prevent it from becoming
>> a
>> master browser. If that domain controller is also the pdc fsmo, consider
>> transferring that role to another domain controller if at all possible.
>> Also
>> verify that each domain controller can see itself when you use " net view
>> "
>> command.
>>
>> If you make some changes, do not expect the browse list to correct itself
>> right away but within a hour or so and if wins is used on the network run
>> the command " nbtstat -RR " being sure to use uppercase on the domain
>> controllers shortly after making the changes and check the wins database
>> for
>> correct records and examine any static records for accuracy for the
>> domain
>> controllers or master browsers if any, which normally there are not. I
>> would
>> also check the lmhosts files on the domain controllers to make sure there
>> are not old entries used to map to the IP address of the PDC. It is
>> curious
>> that there had not been a problem before but the whole browse list
>> mechanism
>> is fickle to say the least. When I read Mark Minasi's Mastering Windows
>> 2003
>> Server, he even admits he can not figure out browse list problems all the
>> time --- Steve
>>
>> http://support.microsoft.com/default...b;en-us;135404 -- multi
>> homed master browser problems.
>> http://support.microsoft.com/kb/q163409/ -- explaination of netbios 16th
>> character that shows in wins database and with nbtstat -n.
>>
>> "Alan Ruddock" <(E-Mail Removed)> wrote in message
>> news:0EA6971D-29F0-456F-BBF0-(E-Mail Removed)...
>> > Steven,
>> >
>> > Firstly thanks for your time, answers to your questions follow ...
>> >
>> > There were no changes i know of at the time the DCs dissapeared from
>> > the
>> > browse list (althought obviously something has happened).
>> >
>> > I should have mentioned earlier that one of the DCs is a RAS Server.
>> > This
>> > has been the case for a long time though and the problems are recent.
>> >
>> > All event logs on both machines are clear.
>> >
>> > The results of nbtstat -n and browstat status follow ....
>> >
>> > On DC01 the PDC emulator ...
>> > ----------------------------------------------------------------
>> >
>> > C:\>nbtstat -a DC01
>> >
>> > Local Area Connection:
>> > Node IpAddress: [10.x.x.205] Scope Id: []
>> >
>> > NetBIOS Remote Machine Name Table
>> >
>> > Name Type Status
>> > ---------------------------------------------
>> > DC01 <00> UNIQUE Registered
>> > MYDOMAIN <00> GROUP Registered
>> > MYDOMAIN <1C> GROUP Registered
>> > DC01 <20> UNIQUE Registered
>> > MYDOMAIN <1B> UNIQUE Registered
>> > DC01 <03> UNIQUE Registered
>> > MYDOMAIN <1E> GROUP Registered
>> > MYDOMAIN <1D> UNIQUE Registered
>> > ..__MSBROWSE__.<01> GROUP Registered
>> >
>> > MAC Address = 00-30-6E-06-8F-55
>> >
>> > C:\>nbtstat -a DC02
>> >
>> > Local Area Connection:
>> > Node IpAddress: [10.x.x.205] Scope Id: []
>> >
>> > NetBIOS Remote Machine Name Table
>> >
>> > Name Type Status
>> > ---------------------------------------------
>> > DC02 <00> UNIQUE Registered
>> > MYDOMAIN <00> GROUP Registered
>> > MYDOMAIN <1C> GROUP Registered
>> > DC02 <20> UNIQUE Registered
>> > MYDOMAIN <1E> GROUP Registered
>> >
>> > MAC Address = 00-30-6E-06-2F-DB
>> >
>> > C:\>browstat status
>> >
>> > Status for domain MYDOMAIN on transport
>> > \Device\NetBT_Tcpip_{2F99145C-8DCD-400F-8
>> > A8A-5F53723EDF5A}
>> > Browsing is active on domain.
>> > Master browser name is: DC01
>> > Master browser is running build 3790
>> > 2 backup servers retrieved from master DC01
>> > \\SVR01
>> > \\DC01
>> > There are 43 servers in domain MYDOMAIN on transport
>> > \Device\NetBT_Tcpip_{2F9
>> > 9145C-8DCD-400F-8A8A-5F53723EDF5A}
>> > There are 4 domains in domain MYDOMAIN on transport
>> > \Device\NetBT_Tcpip_{2F99
>> > 145C-8DCD-400F-8A8A-5F53723EDF5A}
>> >
>> >
>> > On DC02 ...
>> > -----------------------------------------------------------------
>> >
>> > C:\>browstat status
>> >
>> >
>> > Status for domain MYDOMAIN on transport
>> > \Device\NetBT_Tcpip_{CC87E309-1AC7-4CAF-8
>> > 6CC-6C065140FD22}
>> > Browsing is active on domain.
>> > Master browser name is: DC02
>> > Master browser is running build 3790
>> > 3 backup servers retrieved from master DC02
>> > \\SVR01
>> > \\WKD03
>> > \\DC01
>> > There are 43 servers in domain MYDOMAIN on transport
>> > \Device\NetBT_Tcpip_{CC8
>> > 7E309-1AC7-4CAF-86CC-6C065140FD22}
>> > There are 4 domains in domain MYDOMAIN on transport
>> > \Device\NetBT_Tcpip_{CC87
>> > E309-1AC7-4CAF-86CC-6C065140FD22}
>> >
>> >
>> > Status for domain MYDOMAIN on transport
>> > \Device\NetBT_Tcpip_{20A3573A-2A90-4E89-8
>> > E3B-321DADEACD40}
>> > Browsing is NOT active on domain.
>> > Master name cannot be determined from GetAdapterStatus.
>> >
>> >
>> > On a workstation ...
>> > -------------------------------------------------------------------------
>> >
>> >
>> > Status for domain MYDOMAIN on transport
>> > \Device\NetBT_Tcpip_{CFF558D9-D2CB-4F39-9
>> > 99D-9E4454CE4053}
>> > Browsing is active on domain.
>> > Master browser name is: DC02
>> > Master browser is running build 3790
>> > 3 backup servers retrieved from master DC02
>> > \\SVR01
>> > \\DC01
>> > \\WKD04
>> > There are 43 servers in domain MYDOMAIN on transport
>> > \Device\NetBT_Tcpip_{CFF
>> > 558D9-D2CB-4F39-999D-9E4454CE4053}
>> > There are 4 domains in domain MYDOMAIN on transport
>> > \Device\NetBT_Tcpip_{CFF5
>> > 58D9-D2CB-4F39-999D-9E4454CE4053}
>> >
>> >
>> > Any further thoughts ...
>> >
>> > Alan
>> >
>> >
>> >
>> >
>> > "Steven L Umbach" wrote:
>> >
>> >> Have there been any configuration changes lately such as changing
>> >> security
>> >> policy or adding a network adapter to a domain controller?? Multi
>> >> homed
>> >> domain controllers [or being a remote access server] are the biggest
>> >> cause
>> >> of browsing problems. I would run the command " nbtstat -n " to make
>> >> sure
>> >> each dc shows at least three registered names and check the Event
>> >> Viewer
>> >> logs to see if any browse list related problems are reported. Verify
>> >> that
>> >> each domain controller is also a wins client, which would be itself in
>> >> your
>> >> case. You can use the browstat tool to troubleshoot browse problems.
>> >> Run
>> >> "
>> >> browstat status " for instance to find out the names of the master
>> >> browsers. --- Steve
>> >>
>> >> http://www.petri.co.il/download_free_reskit_tools.htm --- download
>> >> browstat here.
>> >>
>> >> "Alan Ruddock" <(E-Mail Removed)> wrote in
>> >> message
>> >> news:443680E0-8147-4A65-A8C8-(E-Mail Removed)...
>> >> > Group,
>> >> >
>> >> > I am looking after a Windows 2003 AD Domain and a few weeks ago the
>> >> > Domain
>> >> > Comtrollers all dropped off the browse list. I have read through a
>> >> > lot
>> >> > of
>> >> > material on similar problems and can find no way to resolve the
>> >> > problem
>> >> > so
>> >> > i
>> >> > am asking for any suggestions you may have.
>> >> >
>> >> > The Setup ...
>> >> >
>> >> > All the computers in the Domain are on the same subnet, the DC's can
>> >> > be
>> >> > accessed via the run command snd drives can be mapped to them. The
>> >> > master
>> >> > browser on the subnet is the PDC emulator which is set to be the
>> >> > DomainMsster.
>> >> >
>> >> > As the Doamin is small each of the domain controller runs AD, DHCP,
>> >> > WINS
>> >> > and
>> >> > DNS, this has always been the case, long before the problems
>> >> > started.
>> >> >
>> >> > Any Thoughts ...
>> >> >
>> >> > Alan
>> >>
>> >>
>> >>
>>
>>
>>

net config server - OK
netdiag - OK

Windows Server 2003 has no "No access without explicit anonymous
permissions" setting but according to articles i have read the equivalent
settings "Do not allow anonymous enumeration of SAM accounts" and "Do not
allow anonymous enumeration of SAM accounts and shares" are both now disabled.

Still no luck.

Thanks for all your help you have any more ideas let me know and if i ever
find a solution i will post it.

Alan



"Steven L Umbach" wrote:

> Like I said, browse list problems can be a real PIA. Run the command net
> config server on both of them to make sure they are not reported as being
> hidden. I would also run the support tool netdiag on both of the dc's to see
> if anything unusual is reported. Note that it is not unusual for netdiag to
> complain that workstation service is not bound to any adapter for whatever
> reason but I always still like to use it. I am keeping my fingers crossed
> that this will sort itself out with time as I am about out of ideas also. Oh
> one more thing I just though of, open Local Security Policy on the two
> domain controllers and make sure that the security option for "additional
> restrictions for anonymous access" is NOT set to "no access without explicit
> anonymous permissions". Look under security settings/local polices/security
> options. See the KB link below for more info on how this setting can cause
> browse problems and the associated registry key that you may want to
> check.--- Steve
>
> http://support.microsoft.com/?kbid=246261 -- make sure this setting is NOT
> enabled.
>

OK. Good luck. I will post back if I can come up with anything else to
check. By the way I would enable "do not allow enumeration of sam accounts"
from a security perspective and I have never found that to interfere with
the browse list. If you have ever used a packet sniffer, I would try to see
what is going on at the packet level, particularly with traffic on port 138
UDP. I have done that on occasion, while trying to access My Network Places
and I could see the requests going out to and coming back from master/backup
browser, etc. I much prefer Ethereal over the built in netmon however. The
link below is for advanced use of browstat. --- Steve

http://support.microsoft.com/default...b;EN-US;188305


"Alan Ruddock" <(E-Mail Removed)> wrote in message
news:77ACF458-7F55-43A6-A020-(E-Mail Removed)...
> net config server - OK
> netdiag - OK
>
> Windows Server 2003 has no "No access without explicit anonymous
> permissions" setting but according to articles i have read the equivalent
> settings "Do not allow anonymous enumeration of SAM accounts" and "Do not
> allow anonymous enumeration of SAM accounts and shares" are both now
> disabled.
>
> Still no luck.
>
> Thanks for all your help you have any more ideas let me know and if i ever
> find a solution i will post it.
>
> Alan
>
>
>
> "Steven L Umbach" wrote:
>
>> Like I said, browse list problems can be a real PIA. Run the command net
>> config server on both of them to make sure they are not reported as being
>> hidden. I would also run the support tool netdiag on both of the dc's to
>> see
>> if anything unusual is reported. Note that it is not unusual for netdiag
>> to
>> complain that workstation service is not bound to any adapter for
>> whatever
>> reason but I always still like to use it. I am keeping my fingers crossed
>> that this will sort itself out with time as I am about out of ideas also.
>> Oh
>> one more thing I just though of, open Local Security Policy on the two
>> domain controllers and make sure that the security option for "additional
>> restrictions for anonymous access" is NOT set to "no access without
>> explicit
>> anonymous permissions". Look under security settings/local
>> polices/security
>> options. See the KB link below for more info on how this setting can
>> cause
>> browse problems and the associated registry key that you may want to
>> check.--- Steve
>>
>> http://support.microsoft.com/?kbid=246261 -- make sure this setting is
>> NOT
>> enabled.
>>
>