Microsoft expects security effort to take time