[1709, fcu] April Cumulative update failing due to Sophos

[jmak]

As per title. I am preparing a laptop to give to a new member of staff, so it hasn't had updates for a few weeks as it's been in a cupboard. All updates apart from the April cumulative update installed first time, but I kept getting a 0x80070005 for KB4093112. I watched it and I noticed that once it started installing, the "Sophos has detected a threat and moved it to quarantine" message appeared. There wasn't anything in the Sophos quarantine, but I went into services and then manually stopped all of the Sophos services and the update installed successfully. This update successfully installed on my machine which has the same OS version (Windows 10 Education x64 1709). Sophos is up to date on both machines.

 

Any ideas? I'm just slightly concerned that I'll have a batch of machines that don't get the cumulative update and it won't be immediately obvious. Plus I'd rather fix it than go around manually circumventing Sophos.

 

Thanks