Having a policy that all machines must be fully patched is an invitation for trouble. How can there be any testing of patches and staged deployment? Deploying patches without first testing how they might impact a production system is not a best practice.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
