Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 751
  • Last Modified:

fix master browser issue on network - need HELP

we have a network that has multiple segments.  all the servers are on one segment.  on all the computers NetBIOS over TCP/IP is enabled, file and print sharing in installed, and everything has static IPs

something or some computer has stolen the mastr browser role, only computers on their respective segments can see each other on the explore network.

most of our computers are windows 7

how do I set the domain master so I never have this issue again?

we do not use WINS
0
amoos
Asked:
amoos
  • 9
  • 7
  • 2
1 Solution
 
MiftaulCommented:
Masterbrowser concept is r.i.p now. We need to care about this if using wins or netbios nane resolution within the domain.

Disable the master browser service on all computers using gpo,
Computer Configuration- Windows Settings- Security Settings- System Services
0
 
amoosAuthor Commented:
ok.  then we use NetBIOS over tcp/ip on  every NIC

so then how would I find out what device on my network stole the browser service?  

or how do I get back to where I can view any computer on any segment?
0
 
QlemoC++ DeveloperCommented:
WINS definitely would help (and simplify) here. Other than that, you can only disable Computer Browser services on all but server machines - and make sure NetBIOS broadcasts are passed to all segments, and I suppose exactly that is the issue.

Are you using VLANs, or what exactly do you mean with "segments"?

A working DNS should be all you need, on the other hand.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
amoosAuthor Commented:
if I disable the master browser service on all pc's then will this prevent my computers from going to UNC paths?

will they still be able to see all the computers on each segement if the browser service is disabled?
0
 
amoosAuthor Commented:
yes we use VLANS.
0
 
MiftaulCommented:
Is netbios ovef tcp a requirement in your network. Do "browstat status" on your server to find out the master browser.
Masterbrowser service is disabled on 2008 onward dc, we need to enable the service on the pdc role holder.
0
 
amoosAuthor Commented:
do I need to install the WINS feature on my server in order to prevent this?
0
 
QlemoC++ DeveloperCommented:
VLANs require routing if crossing, which stops NetBIOS broadcasts from being seen outside of each segment (which is part of the purpose).

A working DNS server configuration, containing ALL machines, should do IMHO. But setting up WINS makes it easier, and the Browser Service is indeed disabled by default on more recent servers.

However, UNC paths and Browser are not related. Visibility and Browser are. If you type a well-known UNC path, it will always work (if DNS/WINS name resolution works).
0
 
amoosAuthor Commented:
I just enabled the computer browser service on the 2012 DC that is the pdc role holder.  do I have to restart my DC now?
0
 
QlemoC++ DeveloperCommented:
No restart. Starting the service should start the election process. After that, the Browser service listens, and collects infos - which might last (I recall a update period figure of 50 minutes, but that's from NT4 times ...).
0
 
amoosAuthor Commented:
once I have enabled the browser service on my dc that is the role holder do I still need to disable the computer browser service for all my pc's through group policy?
0
 
QlemoC++ DeveloperCommented:
Yes. Several effects often lead to election of arbitrary PCs, and those only providing partial info then, being confusing as is the case now.
0
 
amoosAuthor Commented:
Cool. Now if I disable the computer browser service for all computers will that hurt computers that would need to use a unc path?
0
 
QlemoC++ DeveloperCommented:
Again: No. As long as Browsing does not work, you can't click on the machines, and drill down to the shares and folders, but you can type in \\server to do the same.
0
 
amoosAuthor Commented:
do I need to have the maintainserverlist key and IsDomainMaster key on the primary DC?  if so what do I need to put? and if so then after the keys are created then do I need to reboot the server?
0
 
QlemoC++ DeveloperCommented:
You should not need to touch those keys at all on a server.
0
 
amoosAuthor Commented:
I understand that I do not need to touch them but what I was asking is that they do not exist on my 2012 DC that is the primary so do I need to put them in there and if so then what do I need to put as the values
0
 
QlemoC++ DeveloperCommented:
No need to create them either. The defaults work fine. You only need to create and change if you want to forcibly change the default automated behaviour.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 9
  • 7
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now