Event ID: 8003 filling up the System Event log...

Hi!

We have a site where 1 server, even if we set the IsDomainMaster to FALSE,
is trying to become the master browser (each hour), even if we have a DC
located in this site.

When running browstat status, the master browser of this site is the DC, but
the System Event log of this DC is fill up with Event ID 8003 from the other
server...

What else we could do to stop this server trying becoming a master browser,
and filling up the other server System Event log (very anoying).

I know we could stop the Computer Browser service, but before doing that I
want to be sure they are nothing else we should try/know before.

NOTE: We only have this problem with ONE server in the enterprise (more than
100 hundred servers). Very strange issue...

Thanks.

Claude Lachapelle
Systems Administrator, MCSE


Claude Lachapelle

Do the server have two NICs? These case studies may help,

Event ID 8003 Even ID 8003 - The master browser has received a server announcement from ... network segments within the same subnet, you may receive this event ID too. ...
http://www.chicagotech.net/troublesh...ventid8003.htm


Event ID 8003 - Master Browser issue Case Study - Even ID 8003 - The master browser has received a server announcement ... DHCP on the Airport router, they don't receive 8003 Event ID any more. ...
http://www.chicagotech.net/casestudy...rowser8003.htm



Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Claude Lachapelle" <(E-Mail Removed)> wrote in message news:74CFE41F-2905-4388-939B-(E-Mail Removed)...
Hi!

We have a site where 1 server, even if we set the IsDomainMaster to FALSE,
is trying to become the master browser (each hour), even if we have a DC
located in this site.

When running browstat status, the master browser of this site is the DC, but
the System Event log of this DC is fill up with Event ID 8003 from the other
server...

What else we could do to stop this server trying becoming a master browser,
and filling up the other server System Event log (very anoying).

I know we could stop the Computer Browser service, but before doing that I
want to be sure they are nothing else we should try/know before.

NOTE: We only have this problem with ONE server in the enterprise (more than
100 hundred servers). Very strange issue...

Thanks.

Claude Lachapelle
Systems Administrator, MCSE

"Claude Lachapelle" <(E-Mail Removed)> wrote in
message news:
> Hi!
>
> We have a site where 1 server, even if we set the IsDomainMaster to FALSE,
> is trying to become the master browser (each hour), even if we have a DC
> located in this site.
>
> When running browstat status, the master browser of this site is the DC,
> but
> the System Event log of this DC is fill up with Event ID 8003 from the
> other
> server...
>
> What else we could do to stop this server trying becoming a master
> browser,
> and filling up the other server System Event log (very anoying).
>
> I know we could stop the Computer Browser service, but before doing that I
> want to be sure they are nothing else we should try/know before.
>
> NOTE: We only have this problem with ONE server in the enterprise (more
> than
> 100 hundred servers). Very strange issue...
>

Sorry for the previous blank post.

Two issues could cause the errors:
UDP forwarding on the routers:
http://support.microsoft.com/kb/135464/EN-US/

Incorrect subnet mask. Check the
subnet mask on the machine registering
the errors.


"Claude Lachapelle" <(E-Mail Removed)> wrote in
message news:
> Hi!
>
> We have a site where 1 server, even if we set the IsDomainMaster to FALSE,
> is trying to become the master browser (each hour), even if we have a DC
> located in this site.
>
> When running browstat status, the master browser of this site is the DC,
> but
> the System Event log of this DC is fill up with Event ID 8003 from the
> other
> server...
>
> What else we could do to stop this server trying becoming a master
> browser,
> and filling up the other server System Event log (very anoying).
>
> I know we could stop the Computer Browser service, but before doing that I
> want to be sure they are nothing else we should try/know before.
>
> NOTE: We only have this problem with ONE server in the enterprise (more
> than
> 100 hundred servers). Very strange issue...
>

Effectively, on this server, we have two network interfaces (it is an ISA
server) -- this explain why this server is trying to be the master browser
for the other subnet... and broadcast the request to the other, WHERE the
other server is the master browser (correct me if I'm wrong, a master browser
should be elected for each subnets in a domain?).

I'll take a look at this and let you know.

Thanks.

"Michael Giorgio - MS MVP" wrote:

> Sorry for the previous blank post.
>
> Two issues could cause the errors:
> UDP forwarding on the routers:
> http://support.microsoft.com/kb/135464/EN-US/
>
> Incorrect subnet mask. Check the
> subnet mask on the machine registering
> the errors.
>
>
> "Claude Lachapelle" <(E-Mail Removed)> wrote in
> message news:
> > Hi!
> >
> > We have a site where 1 server, even if we set the IsDomainMaster to FALSE,
> > is trying to become the master browser (each hour), even if we have a DC
> > located in this site.
> >
> > When running browstat status, the master browser of this site is the DC,
> > but
> > the System Event log of this DC is fill up with Event ID 8003 from the
> > other
> > server...
> >
> > What else we could do to stop this server trying becoming a master
> > browser,
> > and filling up the other server System Event log (very anoying).
> >
> > I know we could stop the Computer Browser service, but before doing that I
> > want to be sure they are nothing else we should try/know before.
> >
> > NOTE: We only have this problem with ONE server in the enterprise (more
> > than
> > 100 hundred servers). Very strange issue...
> >
>
>
>
>

In that case also have a look:

Symptoms of multihomed browsers
http://support.microsoft.com/kb/191611/en-us

You are correct, each subnet will have 1 master
browser. The PDC / PDC emulator will always,
by default, be the master for it's subnet.

"Claude Lachapelle" <(E-Mail Removed)> wrote in
message news:
> Effectively, on this server, we have two network interfaces (it is an ISA
> server) -- this explain why this server is trying to be the master browser
> for the other subnet... and broadcast the request to the other, WHERE the
> other server is the master browser (correct me if I'm wrong, a master
> browser
> should be elected for each subnets in a domain?).
>
> I'll take a look at this and let you know.
>
>

If each subnet require a master browser, what about a network with multiple
VLANs???

With this behavior, we will always have workstations in each subnets
starting master browser election... which is annoying.

Thanks.

"Michael Giorgio - MS MVP" wrote:

> In that case also have a look:
>
> Symptoms of multihomed browsers
> http://support.microsoft.com/kb/191611/en-us
>
> You are correct, each subnet will have 1 master
> browser. The PDC / PDC emulator will always,
> by default, be the master for it's subnet.
>
> "Claude Lachapelle" <(E-Mail Removed)> wrote in
> message news:
> > Effectively, on this server, we have two network interfaces (it is an ISA
> > server) -- this explain why this server is trying to be the master browser
> > for the other subnet... and broadcast the request to the other, WHERE the
> > other server is the master browser (correct me if I'm wrong, a master
> > browser
> > should be elected for each subnets in a domain?).
> >
> > I'll take a look at this and let you know.
> >
> >
>
>