In either approach, once the network determines the system is authorized and clean, it can be allowed on the network as usual. Systems that fail some element of the authorization or compliance checks can be relegated to quarantined access temporarily, or permanent restricted access (as in the case of a contractor machine). From quarantined access, the entitys network requests can be redirected to a remediation server where the end station receives instructions to bring itself into compliance. Once brought into compliance, the device can be provided proper access.