Maintaining virtual machines across multiple systems presents different administrative challenges to traditional physical systems deployment. For example, virtual machines can be suspended or powered off or even moved to other servers during a patch application process. Moving a virtual machine, for example, might open a window of vulnerability by potentially having a different patch level than is required on a target physical system.