Are you able to deploy patches at the login box only or is it best for the machine to be logged into Windows and the Zenworks Zone to deploy patches?