Sophos Intercept X with XDR on Servers "Reboot to complete update; computer stays protected"

Question

Why does Sophos Central want me to restart the Servers, if there are no differences between the component versions on Servers that are up to date (Events: " Update succeeded ") and those who sophos central want to reboot (Events: "Reboot to complete update; computer stays protected")? 
 What is actually changed? 
 Since the rollout of Intercept X with XDR in the servers in February sophos central indicated every week, that i should reboot nearly all servers. 
 Serverreboots in our environment must be planed and supervised and users must stop working, so we decidet to schedule reboots only every 3 months for Windows Updates.

Qoosh · Answer

Hi Studierendenwerk , 
 Try checking the following registry key. Let me know if any drivers are waiting to be reloaded on the system(s) which require reboots. Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager Key: PendingFileRenameOperations 
 To find out definitively, we would need to look into the updating logs to find out which specific component installed an update or ran a repair operation (similar to an over-top installation). You can find the install logs related to each component in the "C:\Windows\Temp" directory. 
 If you only wish to reboot your servers every 3 months, I suggest looking into the Software packages to control updating on your systems. A Fixed term support package may be beneficial for your specific use-case. - Software packages