Ever have a Branch Office or Site that has clients that doesn't authenticate to the local dc? Adminstrators get confused and start looking at the client to try and figure out what is wrong, when it is most likely and incorrectly configured Sites and Services