OK. Finally got back to this item.   (although took me forever to find it in this "new" community because it seemed to have dropped off my watched items?!).

Anyway, things have changed slightly.   I am now deactivating SNc user records automatically via the transform map when the LDAP syncs, so the need for a "message" is no longer.   I have also discovered I dont want to automatically remove the ITIL licence as this has implications on 'active' calls that may be still assigned to that now, inactive record.

So my next option is to create a Notification that gets triggered when a user record with an ITIL licences is deactivated during the above sync or possibly an Event that creates a task for someone to action.

Now to work out the scripting

Thoughts?