If the Intrust Server version runs on Windows 2008 or higher, the real-time notifications based on "NET SEND" command do not send alerts even if the rule has been matched.
"NET SEND" does not exist in Windows 2008 server or higher. It has been replaced with the MSG.EXE command
Use 'Execute command ' option in the 'Response actions' tab of the properties of the rule. From there you can specify the MSG.EXE command with parameters.
MSG.EXE command does NOT require the Messenger service to be running on the target computer.