A stage of deployment that allows a noncompliant computer full access to the network until a date and time after which network access becomes restricted. Deferred enforcement provides a client computer sufficient time to remediate before health policy is enforced.