1. An apparatus, comprising: a user interface operable to receive a media access control (MAC) address of a candidate device coupled to a network and one or more credentials from a user; a memory operable to store the MAC address, the credentials from a user, and switch information, wherein the switch information comprises an Internet Protocol (IP) address of a switch coupled to candidate device and one or more ports of the switch; a network interface operable to communicate with the network; a processor communicatively coupled to the user interface, the memory, and the network interface, the processor operable to: receive the MAC address of the candidate device; determine, based on the MAC address of the candidate device, the IP address of the switch coupled to the candidate device; access the switch using the switch IP address; receive the switch information from the switch; receive, using the user interface, credentials from the user and commands to transform the candidate device into a disconnected state; determine, based on the credentials from the user, whether the user is permitted to execute the commands; if the user is permitted to execute the commands, transform the candidate device into a disconnected state on the network and add the MAC address to a blacklist.