Hi @Andrew Millward ,
If this update is in a single deployment, we could delete the deployment on the console and run the policy again on the side of the client. If many updates are in a deployment, we could disable the deployment and delete this update, and able the deployment, finally run the policy again on the side of the client.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.