You can use the The Messages > Advanced action folder contains the following advanced feedback messages as Application Control actions:
Application Denied Message Action - This action will display a notification of denial to the user attempting to run a process controlled by a policy.
...