two workgroup'ed computer refuse to drop itself from master browser

hi,

  There are 2 win2k computers and 2 print-server device (ps101 and another linksys printer-server) all of sudden disappear from my office workgroup. I can still ping them and they can ping others, but all the 2 computer can see in the workgroup is itself.  I do a `browstat status` and it reveal that they somehow become master browser.  I tried to disable computer browser and change to registry Maintainlist = No but still it doesn't resolve the problem. They still can't recognised my linux file server as master browser. We use no dns by the way.

I use browstat view /device/prot_nic_from_master which got the 2 machine+ 2 print server device missing. But the rest ok.

stock99Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

fm250Commented:
Check if they still in the same workgroup.
stock99Author Commented:
they are.  
stock99Author Commented:
i also try to uninstall file-print service, and ms client service. and put it back. Still i problem doesn't go away. I wonder if the browser use any specific port that accidently block by firewall. Thats all i can think of... don't know much about wins server though. Everything work fine with default setting and i never touch any of the setting there.
Exploring SharePoint 2016

Explore SharePoint 2016, the web-based, collaborative platform that integrates with Microsoft Office to provide intranets, secure document management, and collaboration so you can develop your online and offline capabilities.

stock99Author Commented:
forgot to mention there are a couple of winxp one winxp embeded file-server (lacie ethernet disk) and a win2k3 sbs trial server running (just shut down yesterday to elinimate potential source of problem).
deaditeCommented:
I don't know the exact event that is logged off the top of my head, but check your event log on the XP machines and you'll see an error or warning about not finding a master browser and promiting itself.  Take that event ID and find it at www.eventid.net.  You'll see posts about how to handle this.  Your best bet is to look for a post by Adrian G.  THis should set you straight.
deaditeCommented:
Also, check your 2000 machines for the event.
stock99Author Commented:
=application log=
[event ID:4106]

The COM+ Event System detected a corrupt IEventSubscription object.  The COM+ Event System has removed object ID {5F4F5E8D-4599-4BA0-B53D-1DE5440B8770}.  The subscriber will no longer be notified when the event occurs.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


[event ID:20]
Failed to CoGetClassObject for provider "Ncs2". Error code 0x8000401A was returned.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
[event ID:2002]
Unable to open the Redirector service. Redirector performance data  will not be returned. Error code returned is in data DWORD 0.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
[event ID:2004]

Unable to open the Server service. Server performance data  will not be returned. Error code returned is in data DWORD 0.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
[event ID:20]
Failed to CoGetClassObject for provider "Ncs2". Error code 0x8000401A was returned.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
[event ID:2002]

Unable to open the Redirector service. Redirector performance data  will not be returned. Error code returned is in data DWORD 0.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


====system warning==

Event Type:      Warning
Event Source:      E100B
Event Category:      None
Event ID:      8
Date:            9/11/2006
Time:            11:06:02 PM
User:            N/A
Computer:      EDP1190
Description:
Adapter Intel(R) PRO/100 VE Network Connection #2: Did not receive auto-negotiation advertisement from link partner.  A duplex mismatch may occur.
Data:
0000: 00 00 04 00 02 00 58 00   ......X.
0008: 00 00 00 00 08 00 04 80   .......€
0010: 00 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
0028: 08 00 04 80               ...€    
stock99Author Commented:
i dono which error is actually the source of problem. In addition, does these 2 win2k (we have about 1x more win2k has no problem at all) the source of problem bring down the 2 print-server device? If not how am i going to fix the print-server issue (they only got very simple web-interface and doesn't even has reset button).
stock99Author Commented:
deadite:

   how do i search Adrian G post? there seems no search by author options. And i got only tones of adrian. when i do quoted search "Adrian G" i got a hit unrelated to IT issue.
stock99Author Commented:
ok.. i solve the problem myself... but i still don't understand the nature of the problem and if someone can point me to some resource i will give the merit to him/her.


When i was desparately looking through netbios and networking discussion, i came across someone mention about the confict with swtich and netbios but i didnt' go to read it further as i thought i will be OS issue since most of win2k machine work.  But i have nothing more to try so stop all the machine connect to that swtich and reset the switch and problem solve!!! Its a simple 8 port switch. Can anyone point me to some details on how does the windows browing things can get stuff up with switch?



Anyway, thx everyone for giving me ideas ,really appreciated.
fm250Commented:
I had similar situation (almost same), it was something to do with one of the ports on the switch, when I reset it, it works for sometime and problem starts again. You may have to replace the switch later, but only if you get the problem again,  as winxp and windows generally works alot from the cache.

deaditeCommented:
Stock99,

when you go to eventid.net, do a search of the eventid in the error log.  The click the link the matches the description or service/program associated with it.  Usually, Adrian G. has the post you need to fix such errors.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
stock99Author Commented:
just to bump up for the point given. I haven't got time to look up the detail of switching protocol which i guess answer is lied somewhere there. If i come across it latter will post it back to here for reference of other people.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.