device control desktop message
Scottish & Southern Energy Plc. have Device Control enabled with the option "Detect but do not block devices" selected. They also have removable storage set to Block.
What they would like if to have the endpoint alert the user that they have breached the policy by a pop-up message from Sophos. This will then alert the user that they should not do this again which in-turn they will think twice when plugging in USB storage devices.
Email alerts seems to be sent as a work around for him to be notified but this is not what he was after.