We've recently just noticed that the local notification function is no longer showing messages to users when AV (8.5p8 or 8.7p2) finds a threat. We're not sure when they stopped though! I'm fairly sure we've seen them from 8.5 at some point (we were on 7.1 until sometime last year), but I don't remember seeing 8.7 produce anything..
Looking in the options on the local machines, the local message to users tab is still set up though, as it is in ePO (4.5p1) via policy, yet nothing happens..
Any ideas where I can start looking?!