Symantec Integrated DHCP Enforcer quarantines machines when they pass Host Integrity check.