It's more old products that don't support Kerberos (think old scanners that store scans on a file share, or an old http proxy), or the fact that Kerberos doesn'

It's more old products that don't support Kerberos (think old scanners that store scans on a file share, or an old http proxy), or the fact that Kerberos doesn't work if using IP addresses to connect to things, or from machines outside of a domain.