There is a balance here since a Windows machine is, 9-times-out-of-10, still vulnerable if patched but not yet rebooted. Some of our people get pissed at having to reboot while they're in the middle of a run, but that's just the price you must pay to use Windows.