A verified identity on an unpatched laptop is still a problem. The four posture checks worth enforcing, and how to roll them out without a help-desk flood.