Dynamic internet address assignment based on user identity and policy compliance

A method, comprising:

• presenting a client requesting an IP address from a DHCP server, wherein the client provides client information to the DHCP server, wherein the client information is a security vulnerability, and wherein the client requesting is made in association with a security threat detected by a client security facility;
• formulating a first IP assignment and a first plurality of DHCP options by the DHCP server;
• intercepting the first IP assignment and the first plurality of DHCP options by a policy management facility, wherein intercepting stops the sending of the first IP assignment and the first plurality of DHCP options to the client;
• sending client information to the policy management facility;
• formulating a second plurality of DHCP options in association with the policy management facility, wherein the second plurality of DHCP options is sent from the policy management facility to the DHCP server;
• changing the DHCP options in the DHCP server from the first IP assignment and first plurality of DHCP options to a second IP assignment and the second plurality of DHCP options;
• and
• sending the second IP assignment and the second plurality of DHCP options from the DHCP server to the client, wherein the client applies the second IP assignment and the second plurality of DHCP options in association with the client security facility.