Windows security 'will take time'