Reposturing

We have dedicated ssid for contractor where the contractor user will connect to the isolation then enter the entra id by captive portal then fnac checking the antivirus by posturing. When posturing result is ok then the device will move from rogue host to registered host.

With this condition when next day the contractor connect to the network then the posturing is not executed because the posturing only will be executed for rouge host.

So can we move the devices from registered host to rouge host for contractor if the device not connect to the newtork for some period?