In order to configure a client machine to detect when the vlan changes you must define the appropriate registry keys on the client. The following required DWORD registry keys are all located in the same HKEY_LOCAL_MACHINE\Software\Cisco\Clean Access Agent\ registry location.
RetryDetection 5
PingArp 0
VlanDetectInterval 5
You’ll need to make these changes is you’re in an OOB layer 3 central server deployment with IP phones and can’t bounce the switch port after the certified device list is cleared.