Master PC on home network??

Hi All:

What is "Master Browser "? In event viewer system I have gotten an error message that the gist of which something like this:

"Machine Chris thinks it is the master browser and Windows has had to choose between the two"

And this additional one when his cat 5 cable was disconnected:

Event Type: Warning
Event Source: BROWSER
Event Category: None
Event ID: 8021
Date: 3/11/2004
Time: 10:54:15 PM
User: N/A
Computer: CATASTROPHY
Description:
The browser was unable to retrieve a list of servers from the browser master \\CHRIS on the network \Device\NetBT_Tcpip_{56FA29F9-4956-4A32-8E87-3B9586E011F6}. The data is the error code.

This is my son's computer, 3 networked computers, mine, son Chris and Daugter's running XP Home, networked, hardwired to D-Link 614+ wireless broadband router. (wireless not in use)

His ability to connect to the internet and use MSN is a privledge he must earn by doing his chores, undone chores is why the cat 5 cable was unplugged at that time.

How and why did his machine become the "browser master "?

What is the downside/upside of having his machine the "browser master "

Does it need to be changed?

All replies are appreciated

Martin

 

What are the operating systems of all pc's ?
Are any server's

The purpose of the master browser is for one pc to keep a master list of all pc's on the LAN. You can disable the browser service of within the registry change the setting to =no

search http://support.microsoft.com for instructions.

As for internet access, you could add an access rule in the dlink router based on the MAC address of his NIC. This can be turned on/off from the dlink configuration. This in my opinion "nails" down his computer because he could simply come home...when your not home, and plug the cable in. As long as he does not know the password to the dlink configuration, he can't by-pass it.

back to the browse list. At some point in time, his computer was the only one "ON ". His machine self delgated himself as the master browser.

 

Hi Jedi: Thanks for the response on this. You must have a teenager at home to figure he would plug in the cable while I'm not around, and Chris probably would do that.

So, rather than disable the registry service I like the idea of having a way to shut off his access with my keyboard.

All 3 computers are running XP Home SP1a. I'm not sure whether any could be considerd servers, I usuall install stuff on their machines from mine using file sharing, copy install files from mine to theirs.

Can you help me with this? Im relatively new to networking and I would'nt have a clue on how to even begin, including finding his MAC address. So, if you get the time and are so inclined, a step by step would be appreciated. Then maybe I could learn something out of this.

Thanks again

Martin

 

To find the MAC address for each machine.
goto a command prompt.
Click the start button, then run.
In the run box, type cmd. Hit enter.
At the command prompt type ipconfig /all ,hit enter
Something like "C:\ipconfig /all "
This will display a lot of information about your ehternet connection.
Look for Physical Address......00-D0-AA-C0-00-7C This is the MAC address
MAC addresses are globally unique. The one listed above happens to be mine.
No two (theoretically) are alike...like finger prints.

Write this down somewhere.

Open up you web browser and go to the dlink configuration screen.
Something like http://192.168.1.1
Enter the password to get to the configuration screen.
What you are trying to accomplish is an ACL (access control list)
Read the documentation as the steps differ among manufacturers.
Click on the tab for ACL.

What you want to accomplish is preventing this MAC address from going out the router. In laymens terms you are saying "everyone on the LAN can go out BUT this MAC address.

 

Martin - good advice from 24jedi.

With XP you can easily take care of the browser piece without getting near the registry. Services, locate Computer Browser, and you can stop it, start it, set startup to manual or disabled.

You do need one PC running browser service unless you have static IP addresses and a hosts file on each PC. Under certain conditions you may need all the PCs running browser services but from what I remember of your configuration, I don't think that's the case with your network.

 

Thanks Guys, one more question? Do all machines have to be on to do this??

Martin

 

It makes no difference which machines are on/off, when you turn off the computer browse service on a particular computer.

Nor does it make a difference which computer is on when you enter an ACL in the router.

 

Hi all, I got into the configuration settings for the DI-614, could not find anything that had an ACL. Found settings to disallow a specific MAC address, but seems like a semi permanent setting and would have to go back into the settings to change it back.

Much easier to just pull the plug.

Am I missing a way to set up a shortcut to this setting?

Martin

 

The only shorcut I know of would be for your routers address. Not much help there. But I believe that once you set up the MAC or IP address block, it would merely be a case of enabling or disabling the filter. Settings should remain till you change them.

 

martinr121...what you found is correct. to disallow the flow of traffic of either a particular type of application or workstation...is to set an ACL "Access Contol List ".

noahdfear is right. From within the configurator, first you set it up. Then, at your discretion, you enable/disable access for this workstation through the router.

A cat5 cable is easier to unplug. It is also easy to plug-in.

Eihter way...it was a good day. You learned something new

 

Yes guys, I agree, the only problem is that it took me 15-20 minutes to find the **** setting. I was pretty sure I was in the correct window, but there are umpteen settings and going back in and looking for it again after it was set to lock him out will probably take just as much time.

I think, unless I can do it in a couple of clicks, I'll just take my chances with the current routine.


Thanks for all the good information, and I did learn more than something, I learned a lot.

Martin

 

It may take 15-20 minutes to get there the first few times, but if you have to shut him down as often as I do mine, it won't take long for you to get there in 30 sec.

 

martinr121...btw

My threee kids are 5 and younger. Not quite ready for a mouse, although my 5 year old has gotten pretty good at gameboy.

The response to your statement is two-fold.
1. I have been a network admin for the last 5 years.
2. Being a trouble shooter AND I still remember my teens, my first thought was how he could beat the system.

As a kid, I was always looking to beat the system...which ultimately developed into trouble shooting.

Cheers,
Don

 

Martin - you can do it with a couple of clicks. What you need is 2 .reg files on the PC. One enables internet access and the other disables it. All that is needed is to change some value that is required for internet access. An easy place to start would be changing the default gateway address from a good value to a bad one and back.

In case you haven't messed with .reg files, they simply make a change to the registry based on their content and these two would be simple.

Then protect the files so that only an admin account can run them and don't let the kid know details on the admin account.

To use either file, just right-click the desktop shortcut, select Run As, put in your admin account and run the thing.

If it turns out that your offspring figures out what you are changing and can manually set it back, then he may have a career as a netadmin in his future and you can further his training by changing something else.

 

Hey Newt, thanks for contributing to my and my son's education. What are these?

And:

How do you do this?

And how do you get the shortcuts on the desktop?

Any time I'm in the registry, I am extremely apprehensive. I have only deleted stuff and held my breath. Feel up to a step by step? If not, I won't be upset.

I'll bet I'm not the only father in this type of delimma, so this may be useful to others. (a thinly veiled attempt to motivate you.)

Martin

 

I've got a simpler solution. Just remove the power cord from the PC.

If he needs to write a paper...tell him to do it the old fashion way...paper and pencil.

 

Paper and pencil? What's that?

Martin

 

Any time I'm in the registry, I am extremely apprehensive

That's the beauty of a .reg file. You never have to open the registry. The file is like a little batch file except that it writes registry changes.

I'll whomp up the two needed reg files and post the contents here with instructions. Couple of lines in each file is all it will take. Just place the files in C:\ and put a shortcut into the All Users account (explorer~documents & settings~all users) and in the desktop folder.

But now for a little more info from you. I'm sure you've mentioned most or all of this but I'm too dang lazy to look for it.

- are you using NTFS or FAT32 file system?
- does your offspring have a logon username?
- what is the IP address of the 'default gateway' for your PCs?

 

Hi Newt: Your idea sounds promising. Not too scary.

File System: NTFS my machine, Fat 32 his machine. Been thinking about changing the Fat 32 to NTFS but have not yet. If it will help, I'll convert it tomorrow.

His logon name: Christopher, also his computer name.

From Aida32:

Hardware Address 00-50-2C-06-DF-06
Network Adapter Addresses
IP / Subnet Mask 192.168.0.101 / 255.255.255.0
Gateway 192.168.0.1
DHCP 192.168.0.1

Anything else?

Thanks again:

Martin

 

It will help. NTFS has lots better security.

After that, go into the groups folder (I right-click My computer then left-click Manage, expand Local Users & Groups, then into groups.

Put his account into the group labeled Users if you want to seriously limit what he can do or Super Users if you want him to be able to do most management but still not have full access. Make sure it is only in one group.

Put your account into Administrators.

When I post the .reg file contents, copy them into notepad or some other text editor, name the files to suit yourself as long as the name ends in .reg (and a shortcut in the All Users desktop as we discussed but not the actual file), then right click on each file and properties~security.

Once there, you will want only the groups in security and no user accounts other than System (if it is there already - otherwise not).

Give Administrators full access to the files.

Take away all the checked permissions for the User group. DO NOT use Deny but just uncheck them. They are probably greyed out on that screen so you'll have to go into advanced, pick users again, uncheck the box for 'inherit ...' and then remove all the check marks.

Take a look at these screen shots to be sure of what I'm talking about. The doing sounds worse than it is.

Screen1
Screen2
Screen3