adminsb
asked on
unable to retrieve a list of browsers from the browser master
I recently installed a new server (WIN2000) on the network. The following was in the system event log on first boot:
Event Type: Warning
Event Source: BROWSER
Event Category: None
Event ID: 8021
Date: 2/4/2005
Time: 10:51:53 AM
User: N/A
Computer: OCTOPUS
Description:
The browser was unable to retrieve a list of servers from the browser master \\SERVER3 on the network \Device\NetBT_Tcpip_{6B910
Data:
0000: 40 00 00 00 @...
and
Event Type: Warning
Event Source: BROWSER
Event Category: None
Event ID: 8022
Date: 2/3/2005
Time: 3:50:38 PM
User: N/A
Computer: OCTOPUS
Description:
The browser was unable to retrieve a list of domains from the browser master \\SERVER3 on the network \Device\NetBT_Tcpip_{6B910
Data:
0000: ce 04 00 00 Î...
"SERVER3" is one of two domain controllers already on the network. Does anyone know what this error code means, and how do I resolve this "master browser" issue?
Event Type: Warning
Event Source: BROWSER
Event Category: None
Event ID: 8021
Date: 2/4/2005
Time: 10:51:53 AM
User: N/A
Computer: OCTOPUS
Description:
The browser was unable to retrieve a list of servers from the browser master \\SERVER3 on the network \Device\NetBT_Tcpip_{6B910
Data:
0000: 40 00 00 00 @...
and
Event Type: Warning
Event Source: BROWSER
Event Category: None
Event ID: 8022
Date: 2/3/2005
Time: 3:50:38 PM
User: N/A
Computer: OCTOPUS
Description:
The browser was unable to retrieve a list of domains from the browser master \\SERVER3 on the network \Device\NetBT_Tcpip_{6B910
Data:
0000: ce 04 00 00 Î...
"SERVER3" is one of two domain controllers already on the network. Does anyone know what this error code means, and how do I resolve this "master browser" issue?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Restrict Anonymous Settings:
-Domain Security Policy = (do not allow enumeration of SAM account and shares)
Domain Controller 1:
-Domain Controller Security Policy = not defined
-Local Security Policy = (do not allow enumeration of SAM account and shares)
Domain Controller 2:
-Domain Controller Security Policy = not defined
-Local Security Policy = (do not allow enumeration of SAM account and shares)
for clarity I'm using DC1, DC2 etc.... the aforementioned \\server3 is what I am referring to as DC1.
WINS:
Yes DC # 2 is registered as a WINS server, although I doubt WINS is configured correctly. Several months ago we could only access shares on DC#1 by IP address. When I added its own (DC1) IP address to WINS address lookup in Advanced TCP/IP settings under local area connection, the problem was apparently resolved. I should mention that the WINS service appears under administrative tools on DC1, but DC1 does NOT appear in the WINS MMC when I open it. Only DC2 appears. Under WINS replication partners only DC3 appears (and DC3 is a paperweight now).
-Domain Security Policy = (do not allow enumeration of SAM account and shares)
Domain Controller 1:
-Domain Controller Security Policy = not defined
-Local Security Policy = (do not allow enumeration of SAM account and shares)
Domain Controller 2:
-Domain Controller Security Policy = not defined
-Local Security Policy = (do not allow enumeration of SAM account and shares)
for clarity I'm using DC1, DC2 etc.... the aforementioned \\server3 is what I am referring to as DC1.
WINS:
Yes DC # 2 is registered as a WINS server, although I doubt WINS is configured correctly. Several months ago we could only access shares on DC#1 by IP address. When I added its own (DC1) IP address to WINS address lookup in Advanced TCP/IP settings under local area connection, the problem was apparently resolved. I should mention that the WINS service appears under administrative tools on DC1, but DC1 does NOT appear in the WINS MMC when I open it. Only DC2 appears. Under WINS replication partners only DC3 appears (and DC3 is a paperweight now).
ASKER
DC1:
HKEY_LOCAL_MACHINE\SYSTEM\
LMannounce = 0
HKEY_LOCAL_MACHINE\SYSTEM\
MaintainServerList = YES
HKEY_LOCAL_MACHINE\SYSTEM\
IsDomainMaster = FALSE
DC2: Same settings...
I'm going to change both to LMAnnounce = 1 tonight.
Should one of these be set to IsDomainMaster = TRUE ?
There have been MANY error log entries referring to the Browser Master...forced elections etc...
Win Updates are current up to a week or so ago. (SP4 included)
HKEY_LOCAL_MACHINE\SYSTEM\
LMannounce = 0
HKEY_LOCAL_MACHINE\SYSTEM\
MaintainServerList = YES
HKEY_LOCAL_MACHINE\SYSTEM\
IsDomainMaster = FALSE
DC2: Same settings...
I'm going to change both to LMAnnounce = 1 tonight.
Should one of these be set to IsDomainMaster = TRUE ?
There have been MANY error log entries referring to the Browser Master...forced elections etc...
Win Updates are current up to a week or so ago. (SP4 included)
>>Should one of these be set to IsDomainMaster = TRUE ?<<
That would be a hard-hack to test if you can over-come your lack of a browse master.
The value change would actually be "yes". So...
HKEY_LOCAL_MACHINE\SYSTEM\
IsDomainMaster = YES
The only thing about changing that value is that particular registry change will not work on a Windows 2000 DC if it is the PDC emulator.
That would be a hard-hack to test if you can over-come your lack of a browse master.
The value change would actually be "yes". So...
HKEY_LOCAL_MACHINE\SYSTEM\
IsDomainMaster = YES
The only thing about changing that value is that particular registry change will not work on a Windows 2000 DC if it is the PDC emulator.
ASKER
How can I determine if a DC is a PDC emulator?
We have no Win NT clients anymore, but still a few 98SE clients. Will this change affect them adversely?
We have no Win NT clients anymore, but still a few 98SE clients. Will this change affect them adversely?
If you run just one server, it is the PDC (Primary Domain Controller).
Do you have more than one NIC in that server?
Do you have more than one NIC in that server?
You can find out through Active Directory Users and computers for the PDC Emulator
http://support.microsoft.com/kb/234790
How To Find Servers That Hold Flexible Single Master Operations Roles
Thanks
Mike
http://support.microsoft.com/kb/234790
How To Find Servers That Hold Flexible Single Master Operations Roles
Thanks
Mike
ASKER
OK... Changing HKEY_LOCAL_MACHINE\SYSTEM\
LMannounce to 1 on both my DC's did the trick. No more browser issues. Thanks a bunch guys.
LMannounce to 1 on both my DC's did the trick. No more browser issues. Thanks a bunch guys.
Thank you to.
http://support.microsoft.com/?id=246261
How to Use the RestrictAnonymous Registry Value in Windows 2000
That could cause an issue
The Browser service is not able to retrieve domain lists or server lists from backup browsers, master browsers or domain master browsers that are running on computers with the RestrictAnonymous registry value set to 2. Because of this, any program that relies on the Browser service does not function properly.
Are you running WINS on your network?
Thanks
Mike