I think a server patch policy needs to be different than desktop patching. If you force a user to wait a bit longer at boot time to install patches, it's generally not a big issue. Reboot a server during peak usage? You'll have problems.

>I agree on that one. At some point or another, we have to trust something. Delaying its installation could then result in the situation you just described. Some patches do stop IIS, for example, and for those one, we usually have to wait off rush hours. And, we cannot know in advance if IIS will be stopped or not. This is the inconvenience of those patches. So, I usually wait late at night before applying them.