Automated Duo Outdated Device Reports
Every Monday, WebRun opens the Duo admin console, reads the operating system and browser versions on your endpoints against what your policies require, pings Telegram with how many users are about to be blocked, and leaves a drafted Gmail nudge per person telling them exactly what to update.
How do I find Duo endpoints that will be blocked by my device policy?
WebRun opens the Duo admin console every Monday and measures endpoint operating system and browser versions against what your policies require. It pings Telegram with who is blocked or about to be, and drafts a Gmail nudge per user naming the exact update needed, ready for you to review and send.
- Users are nudged before a policy change locks them out mid week
- Each person is told the exact version to update to
- Repeat offenders and common gaps are visible week to week
Built for IT admins · security teams · helpdesk leads · managed service providers
What does WebRun do on every run?
The exact actions WebRun takes, in order - in plain language, so you can adjust anything.
-
WebRun signs in and gets to work
Opens
admin.duosecurity.comin a real browser with your saved login - no setup, no API keys. -
1
Duo Security - read endpoint and browser versions
duo.com
WebRun opens Duo Security to read endpoint and browser versions. - Open the Duo admin console and list endpoints with their operating system and browser versions
- Compare each against the minimum versions your policies require
- Group the results into blocked today, warned today, and about to fall behind, and attach the user to each device
Done when Every endpoint is measured against policy and grouped by how close it is to being blocked.
-
2
Telegram - report who is about to be blocked
telegram.org
WebRun opens Telegram to report who is about to be blocked. - Send the week's summary with counts for each group and the policies involved
- Name the users already being blocked and those closest to it
- List the most common gaps, such as an old browser or an unpatched operating system, so one fix can clear many devices
Done when You have this week's device compliance summary in Telegram with the users at risk named.
-
3
Gmail - draft each user their nudge
gmail.com
WebRun opens Gmail to draft each user their nudge. - Draft one short email per affected user naming their device and the exact version to update to
- Include the policy date so the deadline is clear
- Leave every message in Drafts. WebRun never sends staff email on its own
Done when A drafted nudge sits in Gmail for each affected user, waiting for you to review and send.
How is each run configured?
Secure by default
Connect once, stays signed in
WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.
Every action is checked against this policy before it runs.
Questions, answered
Will it email staff without me?
No. Every nudge is left in Gmail Drafts for you to read and send. WebRun writes the message and stops there, so no staff email goes out without a person approving it.
Will it change my Duo policies?
No. WebRun reads the admin console and reports. Policy edits, version thresholds, and any block or bypass decision stay with your IT admin.
Does it tell people what to actually update?
Yes. Each draft names the device, the current version, and the minimum version the policy requires, so the user knows exactly what to install before the deadline.
Related templates
Put this on autopilot.
Turn it on in minutes - or have our team set it up for you.