Safeguard DE installation Policy VS Casper Remote installation

I have been tasked with setting up a silent deployment of Sophos Safeguard DE. I've looked through the installation guide and completed all the steps but the policy is failing and can't work out why.

All that is involved is:

1. Install Sophos Safeguard DE Package, this install successfully
   2 Copy and Install Safeguard cert and copy settings.zip file to remote computer, this also installs successfully

2. Run script, sudo sgdeadmin --import-config "/Users/Shared/ManagedClientMac.zip".

Step 3 fails when run as a policy but if you send the script using Casper Remote it works, what does Casper Remote do differently when running scripts?

Thanks

Joe