The subnet approach is far more relaible as the authenticating DC is not always in the same subnet as the client.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.