This is exactly what I do here.

Half hour to ghost the server, then patch. If there is a problem, it's
another half hour to fix it (sometimes less).
I have baseline images of all my servers that are periodically refreshed.
Then I have a 'current' image branch that is taken before patching. This is...

[ more ]