A mode determined by the level of network access granted to noncompliant computers. There are three available enforcement modes: reporting mode, deferred enforcement, and full enforcement.