How do I isolate laptops until virus definitions are current?

Hello, I need some help! We are having a problem with users logging on to the domain with laptops that are infected. Is there a way to isolate systems until their AV definitions are brought current. We are using NAV Corporate Edition.