| Event Id | 8003 |
| Source | Rdr |
| Description | The master browser has received a server announcement from the computer MyBDC that believes that it is the master browser for the domain on transport NetBT_NETFLX1. The master browser is stopping or an election is being forced. Data: Words 0000: 00000000 004a0003 00000000 c0001f43 0010: 00000000 00000000 0000055a 00000000 0020: 00000000 00000000 |
| Event Information | <p>The above error messages are added to your domain controllers system log (as seen with the Event Viewer) approximately every 12 minutes.
CAUSE : Routers on your network are configured to forward UDP broadcasts. If a Windows domain spans more than one subnet and the TCP/IP protocol (NetBT) is used, each subnet will have a Master Browser. If a Master Browser receives server announcements from another computer, claiming to be a Master Browser, an election is forced to ensure that there is only one Master Browser per subnet. These browser elections cause the 8003 message to be recorded. If the routers on the network are configured to forward UDP broadcasts to UDP ports 137 and 138, then the election broadcasts that are intended to remain in the subnet are forwarded to other subnets. This has also been seen with bridges or switches between two dissimilar network segments within the same subnet. RESOLUTION : To stop the 8003 error messages, make sure the routers on the network are not forwarding UDP broadcasts, keeping browser elections on NetBT local to each subnet and enable WINS or lmhosts on the network for netbios name resolution. NOTE: Switches configured for VLANs (virtual segmentation) have to be configured on a per VLAN basis to prevent UDP broadcast propagation. |
| Reference Links | 8003 Browsing Errors with UDP Forwarding |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.