I've started playing around with System Compliance Profiler which looks very good But I'm wondering if I could use this to block users connecting to our network or putting them in a separate VLan if they are not compliant If not can I trigger actions on the non compniant computers?
scp is a free tool that comes with epo and only does that basic functionality of looking ms patches and a few other things. the exact functionality you are looking for comes with mnac which is part of tops advanced.....it has a much more powerful check engine and can enforce compliance by kicking people off the network if desired. see here. http://www.mcafee.com/us/enterprise/products/network_access_control/index.html