I often come across Windows servers that have been patched/updated but not booted by mistake. I assume this is supposed to happen automatically after WSUS does it job. However, to finish the updates I am only allowed to turn the server off, not reboot. Why is that? Does Microsoft recomend cold reboots for some of its patches?