How to Fix Master Browser (MRxSmb) Event ID 8003 errors

by Michael Sheehan on May 9, 2007

in Fix It, Microsoft, Software

I was reviewing some Windows Small Business Server 2003 Event Logs and came across a repeated entry in the System log. It basically looked like this:

Event Type: Error
Event Source: MRxSmb
Event Category: None
Event ID: 8003
Date: 5/8/2007
Time: 10:05:16 PM
User: N/A
Computer: [SERVER]
Description:
The master browser has received a server announcement from the computer [computer] that believes that it is the master browser for the domain on transport NetBT_Tcpip_{#######-####-####-#. The master browser is stopping or an election is being forced.

It took quite a while to find a solution, and even those were buried in forums or other posts. So I decided I would post the things that I believe can help. Here are some steps you can follow (no guarantee that they will work, but it worked for me and for others based on the various things that I read).

  1. Look at the System Event log on your Server and look for the Error 8003 (like the one listed above). Within that log, identify the “computer” that is announcing itself as a master browser.
  2. Go on to the computer identified in step 1 and go to the Services Administration panel. You can usually find this by going to Control Panel > Administrative Tools > Services.
  3. Once you have Services open, look for an entry called “Computer Browser”. If that Service is “started,” you have found your culprit. If not, you may have to try the registry hack listed in step 6 a few steps
  4. Double click on the “Computer Browser” service to edit it. STOP the service and then change the type to Disabled (from either Manual or Automatic). Click OK to apply your changes.
  5. That should have resolved the issue. You should check your main servers event logs periodically to be sure that the error doesn’t show up. If it continues to show…
  6. …you have to check the registry value on the computer. You do this by launching your registry editor and going to the following key:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\Parameters\IsDomainMaster
    and ensure that it is set to FALSE. If it isn’t, you can change it to FALSE. Caution: registry edits are dangerous so only do this if you are sure you know what you are doing and the previous fix didn’t work. You probably have to reboot the machine to make the change take place.

I have also read that you need to be sure that all of your computers should be on the same subnet. If the above doesn’t work, be sure to check that.

More detail on the Computer Browser Service can be read here at Microsoft.

Steps 1-5 worked for me. I hope that this was a useful tip (given that it is so hard to find the solution). If it is and it worked for you, drop me a comment. If it didn’t work, I would still like to know.

Did you find this solution useful? If so:

Print Friendly
  • Pingback: google

  • sam

    Thank you.

  • sam

    Thank you.

  • Jade

    Hi this is great information, But i would like to ask: what is this service. if i disable this option on the culprit computers (Which on my network are all Laptops which have access to the internet off site (ADSL ROUTER)) will this affect there other network which they would be connecting to?

    thank you for taking the time to post your findings.

  • Jade

    Hi this is great information, But i would like to ask: what is this service. if i disable this option on the culprit computers (Which on my network are all Laptops which have access to the internet off site (ADSL ROUTER)) will this affect there other network which they would be connecting to?

    thank you for taking the time to post your findings.

  • Tammy

    This solution worked for me and I was so thrilled to have finally found something that worked. (And was simple). Thank you.

  • Tammy

    This solution worked for me and I was so thrilled to have finally found something that worked. (And was simple). Thank you.

  • http://www.hightechdad.com hightechdad

    @ Jade,

    I have made this change on several computers and thus far there have been no adverse effects. It is a mixture of computers as well, dedicated, roaming, etc. However, I cannot guarantee what worked for me (and others) will work for you. That is the thing with computers, there is no environment that is identical…only commonalities.

    Hope that helps,
    -HTD

  • http://www.hightechdad.com Michael

    @ Jade,

    I have made this change on several computers and thus far there have been no adverse effects. It is a mixture of computers as well, dedicated, roaming, etc. However, I cannot guarantee what worked for me (and others) will work for you. That is the thing with computers, there is no environment that is identical…only commonalities.

    Hope that helps,
    -HTD

  • nazir

    i have problem in login script get disconnet on guest pc
    i saw the event viewers system their is a problem in(mrxsmb )(3019) and sometime w32time ))error 62

    plz give a solution

  • nazir

    i have problem in login script get disconnet on guest pc
    i saw the event viewers system their is a problem in(mrxsmb )(3019) and sometime w32time ))error 62

    plz give a solution

  • http://www.luckytexonline.com Muhammad Aqeel

    Nice.

  • http://www.luckytexonline.com Muhammad Aqeel

    Nice.

  • Pieter

    Hi,

    Nice when is happens on client computers..
    but what with thin clients?? disable it on the terminal server??
    The weird thing is that it started to log after the installation of a TrendMicro client agent..
    It also logs about every hour… but only with one TC (like “TC53sitename”, and not all of the TC’s…
    Do you have any idea?

    Thanks in advance.

    Kind Regards,

  • Pieter

    Hi,

    Nice when is happens on client computers..
    but what with thin clients?? disable it on the terminal server??
    The weird thing is that it started to log after the installation of a TrendMicro client agent..
    It also logs about every hour… but only with one TC (like “TC53sitename”, and not all of the TC’s…
    Do you have any idea?

    Thanks in advance.

    Kind Regards,

  • http://www.hightechdad.com hightechdad

    @ Nazir,
    Not sure I can help you with that. You might want to check the Microsoft Support KB.

    @ Muhammad,

    Thanks.

    @ Pieter,

    Sorry I don’t have any information on thin clients and how to fix. You might want to check with TrendMicro for a solution from them.
    Sorry.

    -HTD

  • http://www.hightechdad.com Michael

    @ Nazir,
    Not sure I can help you with that. You might want to check the Microsoft Support KB.

    @ Muhammad,

    Thanks.

    @ Pieter,

    Sorry I don’t have any information on thin clients and how to fix. You might want to check with TrendMicro for a solution from them.
    Sorry.

    -HTD

  • Sancho

    Yo también busqué en muchos foros, pero solo tú tienes la solución correcta del problema.
    Gracias!!

  • Sancho

    Yo también busqué en muchos foros, pero solo tú tienes la solución correcta del problema.
    Gracias!!

  • Fugeth

    I shutdown the browser service and changed it from automatic, to manual and it seems to have resolved my problem.

    I was getting a warning 8005 and error message together. Both seem to have gone away.

  • Fugeth

    I shutdown the browser service and changed it from automatic, to manual and it seems to have resolved my problem.

    I was getting a warning 8005 and error message together. Both seem to have gone away.

  • http://www.hightechdad.com hightechdad

    @Sancho,

    De nada!

    @Fugeth,

    Glad that worked for you!

    -HTD

  • http://www.hightechdad.com/ Michael

    @Sancho,

    De nada!

    @Fugeth,

    Glad that worked for you!

    -HTD

  • devnull

    It worked in my case too .
    Thanks
    Good job Michael!

  • devnull

    It worked in my case too .
    Thanks
    Good job Michael!

  • kill bill

    tnx, I solved wiping away that shitty buggy costly winzoz for linux.die m$, die !!!!!

  • kill bill

    tnx, I solved wiping away that shitty buggy costly winzoz for linux.
    die m$, die !!!!!

  • Jeb

    What happens if the culprit is a Network Accces Server with Linux ( and no access to its services / registry)

  • Jeb

    What happens if the culprit is a Network Accces Server with Linux ( and no access to its services / registry)

  • http://www.hightechdad.com hightechdad

    @Jeb,Interesting. Unfortunately I can't help you there as I'm not a Linux wizard. -HTD

  • http://www.hightechdad.com hightechdad

    @Jeb,

    Interesting. Unfortunately I can't help you there as I'm not a Linux wizard.

    -HTD

  • http://www.ecis.org Richie Rich

    GENIUS! Thanks so much for solving this for me! I have been searching for ages trying to solver the master browser issue, that was periodically disabling my web server.I have now found the machine running the Computer Browser service (why?!) and disabled it on SBS 2003. Now my web server is back up and running. CHEERS!

  • http://www.ecis.org Richie Rich

    GENIUS! Thanks so much for solving this for me! I have been searching for ages trying to solver the master browser issue, that was periodically disabling my web server.

    I have now found the machine running the Computer Browser service (why?!) and disabled it on SBS 2003. Now my web server is back up and running.

    CHEERS!

  • Jad

    Hello Richie, I am still having the same problem, i disabled the computer browser service on the client machine, actually on all client machines since the error is coming each time from a different one. Did you also disable it on the SBS? Thank you

  • Jad

    Hello Richie,
    I am still having the same problem, i disabled the computer browser service on the client machine, actually on all client machines since the error is coming each time from a different one. Did you also disable it on the SBS?

    Thank you

  • http://www.hightechdad.com hightechdad

    @Jad,I would say that you probably shouldn't disable on your SBS because that is part of what it is designed to do. I could be wrong though. -HTD

  • http://www.hightechdad.com hightechdad

    @Jad,

    I would say that you probably shouldn't disable on your SBS because that is part of what it is designed to do. I could be wrong though.

    -HTD

  • Rob Morin

    Another way to fix this, rather than stopping/disabling the Computer Browser Service is to unbind NetBIOS from Tcp on each of the interfaces. To find out which interfaces are bound, type 'BROWSTAT.EXE DN' at a command prompt – this will list the interfaces such as 'DeviceNetBT_Tcpip_{7B935…' as displayed in your System Event Log. Steps to disable NetBIOS over TCP:1) Open Network Connections in the Control Panel2) Open the Properties dialog for any interface3) If TCP/IP is checked, select it and click 'Properties'. (If it is not checked, click 'Cancel' – this interface does not have tcp/ip bound)4) Click the 'Advanced' button5) On the 'WINS' tab, select the radio button for 'Disable NetBIOS over TCP/IP'6) Click OK, OK, then CloseIf you run BROWSTAT.EXE DN again, the list of interfaces should be one less now. Keep doing this for each interface in the list and you will eliminate all of these MRxSMB messages.This can also be disabled using DHCP options if you are using DHCP on your network. Just be careful when you have legacy and non-Windoze boxes that need WINS to connect to the network.

  • Rob Morin

    Another way to fix this, rather than stopping/disabling the Computer Browser Service is to unbind NetBIOS from Tcp on each of the interfaces. To find out which interfaces are bound, type 'BROWSTAT.EXE DN' at a command prompt – this will list the interfaces such as 'DeviceNetBT_Tcpip_{7B935…' as displayed in your System Event Log. Steps to disable NetBIOS over TCP:
    1) Open Network Connections in the Control Panel
    2) Open the Properties dialog for any interface
    3) If TCP/IP is checked, select it and click 'Properties'. (If it is not checked, click 'Cancel' – this interface does not have tcp/ip bound)
    4) Click the 'Advanced' button
    5) On the 'WINS' tab, select the radio button for 'Disable NetBIOS over TCP/IP'
    6) Click OK, OK, then Close

    If you run BROWSTAT.EXE DN again, the list of interfaces should be one less now. Keep doing this for each interface in the list and you will eliminate all of these MRxSMB messages.

    This can also be disabled using DHCP options if you are using DHCP on your network. Just be careful when you have legacy and non-Windoze boxes that need WINS to connect to the network.

  • http://www.hightechdad.com hightechdad

    @Rob,Thanks so much for that additional information. Glad that there are other methods to do this.-HTD

  • http://www.hightechdad.com hightechdad

    @Rob,

    Thanks so much for that additional information. Glad that there are other methods to do this.

    -HTD

  • Robin Freeman

    Thank you, thank you! Disabling the Computer Browser on the offending PC did the trick for me. RF

  • Robin Freeman

    Thank you, thank you! Disabling the Computer Browser on the offending PC did the trick for me. RF

  • http://www.tekst.ru admin

    It work !

  • http://www.tekst.ru admin

    It work !

  • TJ Havens

    Thank You, worked for me to.

  • TJ Havens

    Thank You, worked for me to.

  • tmax

    I am having the same problem with Event error ID 8003, however I only have the one computer.
    the error reads:
    Event Type: Error
    Event Source: MRxSmb
    Event Category: None
    Event ID: 8003
    Computer: xxxxxxxxxxxxxxx
    Description:
    The master browser has received a server announcement from the computer MAIN that believes that it is the master browser for the domain on transport NetBT_Tcpip_{BF7338B3-29BA-4D40-A284. The master browser is stopping or an election is being forced.

    Any ideas on how to correct this please
    regards Max

  • http://www.hightechdad.com hightechdad

    So you don't have any other computers on your network? Are you sharing
    a network with anyone? You need to see if there is a device/computer
    that is called MAIN (you might try pinging it). Did you check your
    settings as outlined in the blog post?

  • tmax

    Hi, thank you for getting in touch. I think I should explain my set up and clarify the problem.
    I do have two computers, both running on XP Pro. I have not set them up on a network, but they have shared a broadband router modem for the past 18 months without any problems. One of the computers is called “main”, so they are clearly communicating even though they have not been set up as a network.
    I have now checked the “my network connection” on both computers, and there is a network “workgroup” listed, and this shows both computers.
    The one called “main” will not allow any access from either computer, and returns an error message: “\main is not accessible. You might not have permission to use this network resource. Contact the administrator of this server to find out if you have access permission. The network path was not found.”
    I then checked in Admin Tools “Services” and found that the computer browser was running and set to automatic, and I have changed that to disabled, as per your blog.

    I have also given some thought as to why this problem has just occurred, even though the computers have been linked via the router modem for some time, without any problems, and I have concluded that it is down to a change in internet security software. I believe that my previous package, which was Panda 2009 internet security, was blocking all network activity, and that my new package Kaspersky Internet Security 2010 is not.

    I will monitor the results and see if that has overcome this problem. If there is any other information or advice you have please let me know.
    I would like to thank you for your very quick and helpful response

  • Pingback: نوع شبكه؟!ØŸ - Persian Networks

  • lawson23

    Good details to answer what the computer browser service is and what it does:
    http://www.blackviper.com/WinXP/Services/Comput

    My questions is we run a large network and I 100% of my machines run this service. Over a WAN we have this 8003 in only one location and the error is on our DC. I don't think the answer is disabling this service on all computers. To me the issue appears to be on our DC but I don't know why.

  • Pingback: Blue Screen Error - Computer Support Forums - FreePCHelp.co.uk

  • mmongeau

    i wish icould use your suggestion listed above, but i am a umass student, and a compute that goes by tzhang causes me this error.i assume it is one of my neighbors on the school network. i will try to find the person at that point because i don't have acces to that computer. what does it do to my computer?

    i will look back for a response. any feedback would be appreciated

    thanx

    michael

  • http://www.hightechdad.com hightechdad

    Unfortunately, it isn't that easy. You might be able to see the name of the PC in your event log and then try to ping it to get the IP address. Other than that, you may have to ask your school's IT dept to look into it. Sorry I don't have a better answer. Good luck!

  • mmongeau

    i wish icould use your suggestion listed above, but i am a umass student, and a compute that goes by tzhang causes me this error.i assume it is one of my neighbors on the school network. i will try to find the person at that point because i don't have acces to that computer. what does it do to my computer?

    i will look back for a response. any feedback would be appreciated

    thanx

    michael

  • http://www.hightechdad.com hightechdad

    Unfortunately, it isn't that easy. You might be able to see the name of the PC in your event log and then try to ping it to get the IP address. Other than that, you may have to ask your school's IT dept to look into it. Sorry I don't have a better answer. Good luck!

  • susan

    I am getting this error…but what exactly IS it…what does it mean?? And is there any reason not to just let it be??

  • susan

    hi, I am also getting this same error. Does it need to be addressed, or can it just be left alone? And what exactly does it mean??? (so not computer savvy!!) thanks!

  • Simon

    Nice one. Worked for me!

  • http://www.pchealer.co.uk Paul

    Thanks this works great advice!

  • Matias Gil – Argentina

    Thank You

  • Xygt3

    Bewdy, it worked for me too. thank you!

  • Rasputin_20

    Thank You!!

  • http://ways-to-make-moneyonline.webs.com/ make money secrets

    Sir, good article… keep writing…

  • http://www.best-registrycleaner.net registrycleaner

    Thank you! Disabling the Computer Browser on the offending PC did the trick for me.

  • http://pulse.yahoo.com/_3MJSVKFYG6IK5Q3JZ44NGSGMNA A.J.

    After at least a month of errors, your article provided useful, easy-to-follow information. I followed the steps, and I’m hopeful the errors will quit. Thanks a ton, man!

  • Pingback: » Windows 2003 Error mrxsmb

  • Mariano Valenzuela

    Hi, i have this problem in a network with a computer that is gone…
    ther server shows this error, but the computer that the error references isnt in the network anymore…

    so i cant apply this solution. Any idea ?

  • Sunil

    Does anyone know the command to find the master browser on a network, from XP clients?

  • Admin

    error is coming in win 2003 sp2 mxrsb how to slove

  • Admin

    load perf error coming in win 2003 sp2 how to slove

  • karthi

    i am so happy.. it’s working … i have to tell u one big thanks….!!!!

    thank you…!

  • Restiron

    Voila! It’s gone. OUTSTANDING!  Thank you!

  • Del511

    Thanks for the straightforward response and it did work.  :-)  Sometimes when you do this work so long, you forget some things.  Thanks again!

  • Slmsiko

    Thank you. It worked fine.

  • EdgeIT

    Don’t know if you are still having this issue or not but you might like to update your records in you DNS to remove old stale records. This should clear up you problem…

  • Abc

    It worked. Thanks a lot

  • http://profile.yahoo.com/WRIE2Q5C326YUOSO3XH3NF7ZZE Brrr in Alaska

    That’s because you turned off the browsing functions. I’m surprised someone hasn’t already mentioned this when this Master Browser “Fix” was posted. The computer browsing services you have been turning off are used to identify the other computers on your network. Apparently most everyone else on here doesn’t care about the other computers on their network, or only have 1 computer.

  • Pingback: WINS - What Is It, How To Install It, and how to Configure DHCP Scopes For WINS Client Distribution - Ace Fekay's Active Directory, Exchange and Windows Infrastructure Services Blog

  • Abc

    thank you 

  • http://www.toledocomputerrepair.com/ Nevis1

    Tried numerous fixes to get Windows XP SP3 to shut down properly…your tip worked!..Thanks.

    BTW The social media box that you have running on the left side of the page blocks some of your posts.

  • http://www.hightechdad.com hightechdad

    Thanks for the info about the social media box. I realize that it sometimes does overlap on top of the content when you have a smaller sized monitor.

  • Keebler

    Also note browser elections can also be result of not having a centralized NTP source on your network.  If you set a source for network time, it makes sure the clocks are pretty sync’d so that a client doesn’t win an election when obviously a server should have a higher ranking as the Master Browser.

  • Asim

    If I stop Computer Browser service the main issue is, the local area networking will be stop and you can not access the local sharing folders in you domain. But I think the registry value change will be work. I will change it and will be answer back. is this work for me or Not.

  • Abeedmp

    EXCELLENT SOLUTION!  THANKS

  • Craig Hudson

    Check your Subnet Mask first. My registry was set correctly, Im still using NetBIOS and Computer Browser. However when I changed the net mask from 255.0.0.0 (still worked but wrong #) to 255.255.255.0 The error in the server log file seems to have stopped. It’s only been 2 days, but it looks like it has stopped. I think this was also causing issues when trying to connect a new PC to the Domain and or adding Security Groups to a workstation. My thinking goes “the computer was having problems finding the Master Browser / Security for the domain because the Server and BadWorkstation where fighting for controll.?” The SubNet Mask should be the same for all the Network Devices (PC’s, MAC’s, Printers, Modems, Routers, Etc.) on your LAN.

  • DewaRama

    Great Article … two thumb.

  • Azmi

    do we need to restart both computers?

  • John Drrysdale

    Thanks a lot bud :-)

Previous post:

Next post: