We are running windows 2000 and XP computers on a novell network. We keep all the machines updated and virus free but some users bring their laptops in and hook them up to the network and spread viruses because those laptops are not patched. They are allowed to do this but they are supposed to make sure they are up to date. The problem is they don’t have to actually log in to novell. They can log in workstation only and get access to internet and email which will still spread a virus on our network. What I want to know is if there is anyway to deny them an ip address if they don’t have certain patches and virus definitions. When they check the workstation only box they can’t access network drives but they still get an ip address which I don’t want. When they boot up I want something to tell them they aren’t patched and they need to contact us or simply the dhcp server won’t give them an address and if they want on they will have to call us. I hope this makes sense. I don’t even know if it’s possible. I can’t just put it in the login script because they don’t have to login to novell to get ip. Thanks