Browser service or Computer Browser Service is a feature of Microsoft Windows to let users easily browse and locate shared resources in neighboring computers. This is done by aggregating the information in a single computer ‘Browse Master’ (or ‘Master Browser’). All other computers contact this computer for information and display in the Network Neighborhood window.

Computer Browser Service provides backwards compatibility for Windows versions that don’t use Active Directory. For My Network Places, Windows Explorer, and the net view command, Computer Browser is still needed in XP

Make sure “Computer Browser” service is disabled on every machine EXCEPT the Domain Controller.

Answer from jbakervt on community.spiceworks.com
Top answer
1 of 9
2

Browser service or Computer Browser Service is a feature of Microsoft Windows to let users easily browse and locate shared resources in neighboring computers. This is done by aggregating the information in a single computer ‘Browse Master’ (or ‘Master Browser’). All other computers contact this computer for information and display in the Network Neighborhood window.

Computer Browser Service provides backwards compatibility for Windows versions that don’t use Active Directory. For My Network Places, Windows Explorer, and the net view command, Computer Browser is still needed in XP

Make sure “Computer Browser” service is disabled on every machine EXCEPT the Domain Controller.

2 of 9
4

Hi All,

Just been troubleshooting a problem on a users machine and in the event log a i saw this error with a description of:

“Description:
The master browser has received a server announcement from the computer that believes that it is the master browser for the domain on transport NetBT_Tcpip_{F81D92ED-721F-46C7-A605-22E416. The master browser is stopping or an election is being forced.”

I saw numerous events referencing different computers. Checked on our server and there are loads of entries as well!!! What effect can this have on our network?

I have done some reading quickly online and it seems to be pointing the finger at the “Computer Browser” service? Ia this service essential and what does it do? (it reccomends disabling this service but it is not a MS website so i dont want to)

We a running a Windows Server 2003 level Domain.

🌐
Microsoft Learn
learn.microsoft.com › en-us › answers › questions › 3198311 › windows-10-event-id-8003
Windows 10 event id 8003 - Microsoft Q&A
Event log shows an error for BOWSER with following text, what is failing? The master browser has received a server announcement from the computer XXXXXXXXXXX that believes that it is the master browser for the domain on transport…
Discussions

EVENT 8003: _believes that it is the master browser for the domain_
Getting this error on my domain controller: The master browser has received a server announcement from the computer XXXXX that believes that it is the master browser for the domain on transport NetBT_Tcpip_{A414C715-F722-40AA. The master browser is stopping or an election is being forced. More on community.spiceworks.com
🌐 community.spiceworks.com
11
5
September 27, 2013
2003 PDC Server will not keep Master Browser, keep getting Event ID 8003
My PDC which is running Server 2003 will not stay the Master Browser for some reason. It keeps giving the Event ID 8003 error that basically says another computer on the domain believes it is the Master Browser. And it changes a couple times a day. And it’s usually a client machine that will ... More on community.spiceworks.com
🌐 community.spiceworks.com
7
1
July 13, 2010
Event ID 8003 & 8033 (BROWSER)
Hi After so many falls from my internal network, I checked the Windows 8.1 event log the following error: Error - browser - 8003/8033 The master browser has received a server announcement from the computer WDMYCLOUD that believes that it is the master browser for the domain on transport ... More on community.wd.com
🌐 community.wd.com
0
0
May 24, 2015
MRxSmb EventID 8003 - TechRepublic
How do we resolve this MRxSmb EventID 8003 The master browser has received a server announcement from the computer TANERPRISE-LT15 that believes that it is the master browser for the domain on transport NetBT_Tcpip_{7BB15084-91A. The master browser is stopping or an election is being forced. More on techrepublic.com
🌐 techrepublic.com
February 6, 2006
🌐
Reddit
reddit.com › r/wazuh › help with implementing event id 8003 for applocker monitoring in wazuh
r/Wazuh on Reddit: Help with Implementing Event ID 8003 for AppLocker Monitoring in Wazuh
February 18, 2025 -

Hello everyone,

We are planning to implement AppLocker in our company and want to first monitor which .exe/.msi files are being executed. Through the Event Viewer on the local user, we discovered that Event ID 8003 is particularly relevant for our needs.

Now, I’m trying to figure out how to implement this in Wazuh, so that Event ID 8003 is logged and we can track who triggers it. I found this GitHub link (https://github.com/wazuh/wazuh/issues/101), but it didn’t help me to solve the issue.

Does anyone here have experience with this or can provide guidance on how to properly capture Event ID 8003 and display the triggering user in Wazuh?

Thanks in advance for your help!

🌐
Visioncomputers
visioncomputers.com › browser-master-event-8003
Fix Event ID 8003 — Browser Master Announcement | Vision Computers | Vision Computers
5865 Jimmy Carter Blvd, Suite 125,, Address2, Norcross, GA, U.S.A. 30071 · 770-840-0015 support@visioncomputers.com
🌐
PeteNetLive
petenetlive.com › home › microsoft › windows › event id 8003
Event ID 8003 | PeteNetLive
November 29, 2019 - Event ID 8003 The master browser has received a server announcement from the computer
🌐
EventEntry
system32.eventsentry.com › applocker › event › 8003
AppLocker Event ID 8003 - *[File name]* was allowed t...
Applocker Event ID 8003 - *[File name]* was allowed to run but would have been prevented from running if the AppLocker policy was enforced.
🌐
HighTechDad™
hightechdad.com › home › tech companies › microsoft
How to Fix Master Browser (MRxSmb) Event ID 8003 errors - HighTechDad™
November 19, 2009 - It basically looked like this: ... for the domain on transport NetBT_Tcpip_{#######-####-####-#. The master browser is stopping or an election is being forced....
Find elsewhere
🌐
Spiceworks
community.spiceworks.com › software & applications
EVENT 8003: _believes that it is the master browser for the domain_ - Software & Applications - Spiceworks Community
September 27, 2013 - Getting this error on my domain controller: The master browser has received a server announcement from the computer XXXXX that believes that it is the master browser for the domain on transport NetBT_Tcpip_{A414C715-F722-40AA.
🌐
Spiceworks
community.spiceworks.com › software & applications
2003 PDC Server will not keep Master Browser, keep getting Event ID 8003 - Software & Applications - Spiceworks Community
July 13, 2010 - My PDC which is running Server 2003 will not stay the Master Browser for some reason. It keeps giving the Event ID 8003 error that basically says another computer on the domain believes it is the Master Browser. And it changes a couple times a day.
🌐
Microsoft Community Hub
techcommunity.microsoft.com › microsoft community hub › communities › products › windows server › ask the directory services team
NTLM Blocking and You: Application Analysis and Auditing Methodologies in Windows 7 | Microsoft Community Hub
October 11, 2023 - 4. 8003 events are being seen on the member servers - examination of server 2008r2-f-04 shows: Log Name: Microsoft-Windows-NTLM/Operational Source: Microsoft-Windows-NTLM Date: 9/25/2009 10:47:36 AM Event ID: 8003 Task Category: Auditing NTLM Level: Information Keywords: User: SYSTEM Computer: 2008r2-f-04.contoso.com Description: NTLM server blocked in the domain audit: Audit NTLM authentication in this domain User: roberg Domain: CONTOSO Workstation: 7-X64-01 PID: 4 Process: Logon type: 3 InProc: true Mechanism: (NULL)
🌐
Jeffpar
jeffpar.github.io › kbarchive › kb › 143 › Q143153
Q143153: Event ID 8003, 8009 and 8019 Appear If Subnet Mask Incorrect | KnowledgeBase Archive
In the Windows NT PDC, the following system event appears in Event Viewer: Event ID: 8003 Description: The master browser has received a server announcement from the computer <Windows NT client> that believes that it is the master browser for the domain on transport <NetBT>. The master browser ...
🌐
WD Community
community.wd.com › legacy products › my cloud os 3
Event ID 8003 & 8033 (BROWSER) - My Cloud OS 3 - WD Community
May 24, 2015 - Hi After so many falls from my ... transport NetBT_Tcpip_{2B002D56-CE40-4AA7-9705-7948B5FCD611}. The master browser is stopping or an election is being forced....
🌐
Microsoft Learn
learn.microsoft.com › en-us › troubleshoot › windows-server › active-directory › windows-time-service-event-ids-24-29-38
You receive Windows Time Service event IDs 24, 29, and 38 on a virtualized domain controller that is running on a Windows Server 2008-based host server with Hyper-V - Windows Server | Microsoft Learn
February 12, 2026 - On a host server that is running Windows Server 2008 with Hyper-V, virtualized domain controllers that are running on a guest operating system are allowed to synchronize their system clocks with the clock of the host operating system. The events that are listed in the Symptoms section are recorded in the System log because domain controllers have their own time synchronization mechanism.
🌐
TechRepublic
techrepublic.com › home › topics › hardware › networks › mrxsmb eventid 8003
MRxSmb EventID 8003 - TechRepublic
February 6, 2006 - How do we resolve this MRxSmb EventID 8003 The master browser has received a server announcement from the computer TANERPRISE-LT15 that believes that it is the master browser for the domain on transport NetBT_Tcpip_{7BB15084-91A. The master browser is stopping or an election is being forced.
🌐
MyEventLog
myeventlog.com › search › find
Event Search
Event ID: 8003 · Source: MRxSmb · Category: None · Message: The master browser has received a server announcement from the computer NT29 that believes that it is the master browser for the domain on transport NetBT_Tcpip_{492C50E8-6A5F-48B9-BA. The master browser is stopping or an election ...
🌐
ITPro Today
itprotoday.com › it-infrastructure › jsi-tip-0585-event-id-8003-every-12-minutes-
JSI Tip 0585 - Event ID 8003 every 12 minutes?
TLS certificates now expire after 200 days. That window will soon narrow to 100 days and eventually to 47.
🌐
Microsoft Knowledge Base
mskb.pkisolutions.com › kb › 154690
How to troubleshoot event ID 9, event ID 11, and event ID 15 ...
This article describes how to troubleshoot event ID 9, event ID 11, or event ID 15 error messages. The following event ID messages may be logged in your system log (use Event Viewer to view the log), although the source can be any controller name (for example, Atdisk, Atapi, or Sparrow).