Sophos Updates and WIndows SteadyState (Steady State)

Is anybody else using Windows SteadyState (Steady State) and Sophos AV?

We are using steady state for our public access terminals.  It unlocks the PCs every morning to run updates and then locks it down for the rest of the day so that changes are not persistant.

We have succeeded in writing a custom script which fires off the Sophos updates.  Our latest development problem is that the local Sophos update account (along with all other local accounts) is disabled during the unlock update process.  That account is required for updates to run.

Just wondering if anyone else has used these products together.

Thanks!