How to Fix Master Browser (MRxSmb) Event ID 8003 errors

I was reviewing some Windows Small Business Server 2003 Event Logs and came across a repeated entry in the System log. It basically looked like this:

Event Type: Error
Event Source: MRxSmb
Event Category: None
Event ID: 8003
Date: 5/8/2007
Time: 10:05:16 PM
User: N/A
Computer: [SERVER]
Description:
The master browser has received a server announcement from the computer [computer] that believes that it is the master browser for the domain on transport NetBT_Tcpip_{#######-####-####-#. The master browser is stopping or an election is being forced.

It took quite a while to find a solution, and even those were buried in forums or other posts. So I decided I would post the things that I believe can help. Here are some steps you can follow (no guarantee that they will work, but it worked for me and for others based on the various things that I read).

  1. Look at the System Event log on your Server and look for the Error 8003 (like the one listed above). Within that log, identify the “computer” that is announcing itself as a master browser.
  2. Go on to the computer identified in step 1 and go to the Services Administration panel. You can usually find this by going to Control Panel > Administrative Tools > Services.
  3. Once you have Services open, look for an entry called “Computer Browser”. If that Service is “started,” you have found your culprit. If not, you may have to try the registry hack listed in step 6 a few steps
  4. Double click on the “Computer Browser” service to edit it. STOP the service and then change the type to Disabled (from either Manual or Automatic). Click OK to apply your changes.
  5. That should have resolved the issue. You should check your main servers event logs periodically to be sure that the error doesn’t show up. If it continues to show…
  6. …you have to check the registry value on the computer. You do this by launching your registry editor and going to the following key:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\Parameters\IsDomainMaster
    and ensure that it is set to FALSE. If it isn’t, you can change it to FALSE. Caution: registry edits are dangerous so only do this if you are sure you know what you are doing and the previous fix didn’t work. You probably have to reboot the machine to make the change take place.

I have also read that you need to be sure that all of your computers should be on the same subnet. If the above doesn’t work, be sure to check that.

More detail on the Computer Browser Service can be read here at Microsoft.

Steps 1-5 worked for me. I hope that this was a useful tip (given that it is so hard to find the solution). If it is and it worked for you, drop me a comment. If it didn’t work, I would still like to know.

Did you find this solution useful? If so: [paypal-donation reference=”master browser”]

85 Responses

  3. Hi this is great information, But i would like to ask: what is this service. if i disable this option on the culprit computers (Which on my network are all Laptops which have access to the internet off site (ADSL ROUTER)) will this affect there other network which they would be connecting to?

    thank you for taking the time to post your findings.

  4. Hi this is great information, But i would like to ask: what is this service. if i disable this option on the culprit computers (Which on my network are all Laptops which have access to the internet off site (ADSL ROUTER)) will this affect there other network which they would be connecting to?

    thank you for taking the time to post your findings.

  5. This solution worked for me and I was so thrilled to have finally found something that worked. (And was simple). Thank you.

  6. This solution worked for me and I was so thrilled to have finally found something that worked. (And was simple). Thank you.

  7. @ Jade,

    I have made this change on several computers and thus far there have been no adverse effects. It is a mixture of computers as well, dedicated, roaming, etc. However, I cannot guarantee what worked for me (and others) will work for you. That is the thing with computers, there is no environment that is identical…only commonalities.

    Hope that helps,
    -HTD

  8. @ Jade,

    I have made this change on several computers and thus far there have been no adverse effects. It is a mixture of computers as well, dedicated, roaming, etc. However, I cannot guarantee what worked for me (and others) will work for you. That is the thing with computers, there is no environment that is identical…only commonalities.

    Hope that helps,
    -HTD

  9. i have problem in login script get disconnet on guest pc
    i saw the event viewers system their is a problem in(mrxsmb )(3019) and sometime w32time ))error 62

    plz give a solution

  10. i have problem in login script get disconnet on guest pc
    i saw the event viewers system their is a problem in(mrxsmb )(3019) and sometime w32time ))error 62

    plz give a solution

  13. Hi,

    Nice when is happens on client computers..
    but what with thin clients?? disable it on the terminal server??
    The weird thing is that it started to log after the installation of a TrendMicro client agent..
    It also logs about every hour… but only with one TC (like “TC53sitename”, and not all of the TC’s…
    Do you have any idea?

    Thanks in advance.

    Kind Regards,

  14. Hi,

    Nice when is happens on client computers..
    but what with thin clients?? disable it on the terminal server??
    The weird thing is that it started to log after the installation of a TrendMicro client agent..
    It also logs about every hour… but only with one TC (like “TC53sitename”, and not all of the TC’s…
    Do you have any idea?

    Thanks in advance.

    Kind Regards,

  15. @ Nazir,
    Not sure I can help you with that. You might want to check the Microsoft Support KB.

    @ Muhammad,

    Thanks.

    @ Pieter,

    Sorry I don’t have any information on thin clients and how to fix. You might want to check with TrendMicro for a solution from them.
    Sorry.

    -HTD

  16. @ Nazir,
    Not sure I can help you with that. You might want to check the Microsoft Support KB.

    @ Muhammad,

    Thanks.

    @ Pieter,

    Sorry I don’t have any information on thin clients and how to fix. You might want to check with TrendMicro for a solution from them.
    Sorry.

    -HTD

  17. Yo también busqué en muchos foros, pero solo tú tienes la solución correcta del problema.
    Gracias!!

  18. Yo también busqué en muchos foros, pero solo tú tienes la solución correcta del problema.
    Gracias!!

  19. I shutdown the browser service and changed it from automatic, to manual and it seems to have resolved my problem.

    I was getting a warning 8005 and error message together. Both seem to have gone away.

  20. I shutdown the browser service and changed it from automatic, to manual and it seems to have resolved my problem.

    I was getting a warning 8005 and error message together. Both seem to have gone away.

  27. What happens if the culprit is a Network Accces Server with Linux ( and no access to its services / registry)

  28. What happens if the culprit is a Network Accces Server with Linux ( and no access to its services / registry)

  30. @Jeb,

    Interesting. Unfortunately I can't help you there as I'm not a Linux wizard.

    -HTD

  31. GENIUS! Thanks so much for solving this for me! I have been searching for ages trying to solver the master browser issue, that was periodically disabling my web server.I have now found the machine running the Computer Browser service (why?!) and disabled it on SBS 2003. Now my web server is back up and running. CHEERS!

  32. GENIUS! Thanks so much for solving this for me! I have been searching for ages trying to solver the master browser issue, that was periodically disabling my web server.

    I have now found the machine running the Computer Browser service (why?!) and disabled it on SBS 2003. Now my web server is back up and running.

    CHEERS!

  33. Hello Richie, I am still having the same problem, i disabled the computer browser service on the client machine, actually on all client machines since the error is coming each time from a different one. Did you also disable it on the SBS? Thank you

  34. Hello Richie,
    I am still having the same problem, i disabled the computer browser service on the client machine, actually on all client machines since the error is coming each time from a different one. Did you also disable it on the SBS?

    Thank you

  35. @Jad,I would say that you probably shouldn't disable on your SBS because that is part of what it is designed to do. I could be wrong though. -HTD

  36. @Jad,

    I would say that you probably shouldn't disable on your SBS because that is part of what it is designed to do. I could be wrong though.

    -HTD

  37. Another way to fix this, rather than stopping/disabling the Computer Browser Service is to unbind NetBIOS from Tcp on each of the interfaces. To find out which interfaces are bound, type 'BROWSTAT.EXE DN' at a command prompt – this will list the interfaces such as 'DeviceNetBT_Tcpip_{7B935…' as displayed in your System Event Log. Steps to disable NetBIOS over TCP:1) Open Network Connections in the Control Panel2) Open the Properties dialog for any interface3) If TCP/IP is checked, select it and click 'Properties'. (If it is not checked, click 'Cancel' – this interface does not have tcp/ip bound)4) Click the 'Advanced' button5) On the 'WINS' tab, select the radio button for 'Disable NetBIOS over TCP/IP'6) Click OK, OK, then CloseIf you run BROWSTAT.EXE DN again, the list of interfaces should be one less now. Keep doing this for each interface in the list and you will eliminate all of these MRxSMB messages.This can also be disabled using DHCP options if you are using DHCP on your network. Just be careful when you have legacy and non-Windoze boxes that need WINS to connect to the network.

  38. Another way to fix this, rather than stopping/disabling the Computer Browser Service is to unbind NetBIOS from Tcp on each of the interfaces. To find out which interfaces are bound, type 'BROWSTAT.EXE DN' at a command prompt – this will list the interfaces such as 'DeviceNetBT_Tcpip_{7B935…' as displayed in your System Event Log. Steps to disable NetBIOS over TCP:
    1) Open Network Connections in the Control Panel
    2) Open the Properties dialog for any interface
    3) If TCP/IP is checked, select it and click 'Properties'. (If it is not checked, click 'Cancel' – this interface does not have tcp/ip bound)
    4) Click the 'Advanced' button
    5) On the 'WINS' tab, select the radio button for 'Disable NetBIOS over TCP/IP'
    6) Click OK, OK, then Close

    If you run BROWSTAT.EXE DN again, the list of interfaces should be one less now. Keep doing this for each interface in the list and you will eliminate all of these MRxSMB messages.

    This can also be disabled using DHCP options if you are using DHCP on your network. Just be careful when you have legacy and non-Windoze boxes that need WINS to connect to the network.

  39. @Rob,Thanks so much for that additional information. Glad that there are other methods to do this.-HTD

  40. @Rob,

    Thanks so much for that additional information. Glad that there are other methods to do this.

    -HTD

  41. Thank you, thank you! Disabling the Computer Browser on the offending PC did the trick for me. RF

  42. Thank you, thank you! Disabling the Computer Browser on the offending PC did the trick for me. RF

  47. I am having the same problem with Event error ID 8003, however I only have the one computer.
    the error reads:
    Event Type: Error
    Event Source: MRxSmb
    Event Category: None
    Event ID: 8003
    Computer: xxxxxxxxxxxxxxx
    Description:
    The master browser has received a server announcement from the computer MAIN that believes that it is the master browser for the domain on transport NetBT_Tcpip_{BF7338B3-29BA-4D40-A284. The master browser is stopping or an election is being forced.

    Any ideas on how to correct this please
    regards Max

  48. So you don't have any other computers on your network? Are you sharing
    a network with anyone? You need to see if there is a device/computer
    that is called MAIN (you might try pinging it). Did you check your
    settings as outlined in the blog post?

  49. Hi, thank you for getting in touch. I think I should explain my set up and clarify the problem.
    I do have two computers, both running on XP Pro. I have not set them up on a network, but they have shared a broadband router modem for the past 18 months without any problems. One of the computers is called “main”, so they are clearly communicating even though they have not been set up as a network.
    I have now checked the “my network connection” on both computers, and there is a network “workgroup” listed, and this shows both computers.
    The one called “main” will not allow any access from either computer, and returns an error message: “\main is not accessible. You might not have permission to use this network resource. Contact the administrator of this server to find out if you have access permission. The network path was not found.”
    I then checked in Admin Tools “Services” and found that the computer browser was running and set to automatic, and I have changed that to disabled, as per your blog.

    I have also given some thought as to why this problem has just occurred, even though the computers have been linked via the router modem for some time, without any problems, and I have concluded that it is down to a change in internet security software. I believe that my previous package, which was Panda 2009 internet security, was blocking all network activity, and that my new package Kaspersky Internet Security 2010 is not.

    I will monitor the results and see if that has overcome this problem. If there is any other information or advice you have please let me know.
    I would like to thank you for your very quick and helpful response

  50. Good details to answer what the computer browser service is and what it does:
    http://www.blackviper.com/WinXP/Services/Comput…

    My questions is we run a large network and I 100% of my machines run this service. Over a WAN we have this 8003 in only one location and the error is on our DC. I don't think the answer is disabling this service on all computers. To me the issue appears to be on our DC but I don't know why.

  51. i wish icould use your suggestion listed above, but i am a umass student, and a compute that goes by tzhang causes me this error.i assume it is one of my neighbors on the school network. i will try to find the person at that point because i don't have acces to that computer. what does it do to my computer?

    i will look back for a response. any feedback would be appreciated

    thanx

    michael

  52. Unfortunately, it isn't that easy. You might be able to see the name of the PC in your event log and then try to ping it to get the IP address. Other than that, you may have to ask your school's IT dept to look into it. Sorry I don't have a better answer. Good luck!

  53. i wish icould use your suggestion listed above, but i am a umass student, and a compute that goes by tzhang causes me this error.i assume it is one of my neighbors on the school network. i will try to find the person at that point because i don't have acces to that computer. what does it do to my computer?

    i will look back for a response. any feedback would be appreciated

    thanx

    michael

  54. Unfortunately, it isn't that easy. You might be able to see the name of the PC in your event log and then try to ping it to get the IP address. Other than that, you may have to ask your school's IT dept to look into it. Sorry I don't have a better answer. Good luck!

  55. I am getting this error…but what exactly IS it…what does it mean?? And is there any reason not to just let it be??

  56. hi, I am also getting this same error. Does it need to be addressed, or can it just be left alone? And what exactly does it mean??? (so not computer savvy!!) thanks!

  63. Thank you! Disabling the Computer Browser on the offending PC did the trick for me.

  64. After at least a month of errors, your article provided useful, easy-to-follow information. I followed the steps, and I’m hopeful the errors will quit. Thanks a ton, man!

  65. Hi, i have this problem in a network with a computer that is gone…
    ther server shows this error, but the computer that the error references isnt in the network anymore…

    so i cant apply this solution. Any idea ?

  66. Does anyone know the command to find the master browser on a network, from XP clients?

  69. i am so happy.. it’s working … i have to tell u one big thanks….!!!!

    thank you…!

  71. Thanks for the straightforward response and it did work.  :-)  Sometimes when you do this work so long, you forget some things.  Thanks again!

  73. Don’t know if you are still having this issue or not but you might like to update your records in you DNS to remove old stale records. This should clear up you problem…

  75. That’s because you turned off the browsing functions. I’m surprised someone hasn’t already mentioned this when this Master Browser “Fix” was posted. The computer browsing services you have been turning off are used to identify the other computers on your network. Apparently most everyone else on here doesn’t care about the other computers on their network, or only have 1 computer.

  77. Tried numerous fixes to get Windows XP SP3 to shut down properly…your tip worked!..Thanks.

    BTW The social media box that you have running on the left side of the page blocks some of your posts.

  78. Thanks for the info about the social media box. I realize that it sometimes does overlap on top of the content when you have a smaller sized monitor.

  79. Also note browser elections can also be result of not having a centralized NTP source on your network.  If you set a source for network time, it makes sure the clocks are pretty sync’d so that a client doesn’t win an election when obviously a server should have a higher ranking as the Master Browser.

  80. If I stop Computer Browser service the main issue is, the local area networking will be stop and you can not access the local sharing folders in you domain. But I think the registry value change will be work. I will change it and will be answer back. is this work for me or Not.

  82. Check your Subnet Mask first. My registry was set correctly, Im still using NetBIOS and Computer Browser. However when I changed the net mask from 255.0.0.0 (still worked but wrong #) to 255.255.255.0 The error in the server log file seems to have stopped. It’s only been 2 days, but it looks like it has stopped. I think this was also causing issues when trying to connect a new PC to the Domain and or adding Security Groups to a workstation. My thinking goes “the computer was having problems finding the Master Browser / Security for the domain because the Server and BadWorkstation where fighting for controll.?” The SubNet Mask should be the same for all the Network Devices (PC’s, MAC’s, Printers, Modems, Routers, Etc.) on your LAN.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Other articles of interest

Global Product Review Disclosure

Disclosure: This is a global disclosure for product review articles on HighTechDad. It does not apply to Automobile reviews and there are other exceptions. Therefore, it may or may not be applicable to this particular article. I may have a material connection because I may have received a sample of a product for consideration in preparing to review the product and write this or other content. I was/am not expected to return the item after my review period. All opinions within this and other articles are my own and are typically not subject to the editorial review from any 3rd party. Also, some of the links in the post above may be “affiliate” or “advertising” links. These may be automatically created or placed by me manually. This means if you click on the link and purchase the item (sometimes but not necessarily the product or service being reviewed), I will receive a small affiliate or advertising commission. More information can be found on my About page.

About HighTechDad

Michael Sheehan (“HighTechDad”) is an avid technologist, writer, journalist, content marketer, blogger, tech influencer, social media pundit, loving husband and father of 3 beautiful girls living in the San Francisco Bay Area. This site covers technology, consumer electronics, Parent Tech, SmartHomes, cloud computing, gadgets, software, hardware, parenting “hacks,” and other tips & tricks.

Facebook-f Twitter Youtube Linkedin Instagram

Recent Articles

Explore Categories

Michael Sheehan (“HighTechDad™”) is an avid technologist, writer, journalist, content marketer, blogger, tech influencer, social media pundit, loving husband and father of 3 beautiful girls living in the San Francisco Bay Area. This site covers technology, consumer electronics, Parent Tech, SmartHomes, cloud computing, gadgets, software, hardware, parenting “hacks,” and other tips & tricks.

Twitter Facebook-f Youtube Instagram Linkedin

Latest Articles

About HighTechDad™