HK...
You will need to create a repsonse rule that you will then associate to the Policy that created the incident.
The Response rule will be configured as the following:
- Automated Response Rule
- Condition: Protocol Endpoint Monitoring: Endpoint Printer Fax
- Response: Endpoint Prevent: NOTIFY
- The customize the content of the pop-up
You will then need to add this reponse rule to the Policy you want it to be associated to,
Hope this makes sense.
If this solves your questions please marked as solved.
Ronak