Device Management & MDM Operations3 min readUpdated September 2026

Kandji vs Rippling IT for a Commercial Solar EPC Firm

For a commercial solar EPC firm, Kandji fits the field iPads used for site surveys and permitting, while Rippling IT fits an office split between Mac and Windows. Decide who owns each device first: company iPads can be wiped when a job ends, but a subcontractor's personal tablet should not be enrolled at all.

Vendors Covered in this Article

Disclosure: We may earn a commission if you buy through some links on this page. It doesn't change what we recommend.

Does Kandji cover the field iPad fleet well?

Yes, if the survey and permitting devices are genuinely all iPads. Kandji's zero-touch enrollment through Apple Business Manager means a replacement iPad can ship straight to a crew lead already configured with the survey app and company Wi-Fi settings, and enforced encryption matters given how much site-specific permitting and structural data lives on those devices. It has no reach into the Windows machines your engineering and project management teams likely run, so it's a field-device answer, not a whole-company one.

What about the office side, where Mac and Windows both show up?

EPC firms tend to have engineering staff on Windows-based CAD and structural software and project management or business development on Mac, which is exactly the kind of split Rippling IT is built to cover from one console. If your office fleet is genuinely mixed and you don't want to run Kandji for the Macs and something else for the Windows machines, Rippling IT's cross-platform reach removes that split entirely.

How should subcontractor device access be handled?

Most EPC firms lean on subcontracted crews for installation labor, and those crews typically use their own devices rather than company-issued ones. Don't enroll a subcontractor's personal tablet in your MDM platform; it's not your equipment to manage, and doing so creates liability without much real security benefit. Instead, scope subcontractor access to a permitting or project management app with its own login, and revoke that access the day the subcontract closes out, independent of whatever device management covers your own crews.

What happens to survey data on an iPad when a job ends or a crew changes?

If the iPad is company-owned and assigned to your own crew lead, offboarding should wipe local data and reassign the device the same day the project closes, which is straightforward if enrollment is already tied to your project or hiring records. If the device belongs to a subcontractor, the real answer is that the data lives wherever it was uploaded to your permitting or project system, not on a device you control, which is exactly why company-owned devices for anything holding sensitive structural or permitting data are worth the cost even on a subcontractor-heavy job.

When a job ends or a crew changes, handle survey data in this order:

  1. Confirm whether the iPad is company-owned or belongs to a subcontractor before deciding what can be wiped.
  2. For a company iPad assigned to your own crew lead, wipe local data and reassign the device the same day the project closes.
  3. Keep enrollment tied to project or hiring records, so that same-day wipe does not depend on someone remembering.
  4. For subcontractor devices, skip enrollment and limit what those crews can reach through app-level access instead.
  5. Check that remote lock and wipe work over cellular, not only Wi-Fi, since a lost device on a job site rarely has Wi-Fi.

Does multi-state licensing change any of this?

Not directly for device management, but it's worth knowing that different states can require different permitting documentation formats, which sometimes means different apps or app versions running on the same survey iPad depending on the job's location. A platform that can push different app configurations to different device groups, rather than one blanket setup for the whole fleet, makes it easier to keep a Texas job's permitting app version separate from a California job's without manually reconfiguring devices between projects.

How should a growing EPC firm think about the build-versus-buy question?

A firm scaling from one crew to several often considers hiring a dedicated operations or IT coordinator to manage field devices instead of adopting a platform. Price that against national wage data, which puts the median salary for a general operations manager at $105,770 a year1: a role at that cost is worth it once you're coordinating device logistics across multiple simultaneous projects and states, but for one or two crews, a platform subscription handling enrollment and remote wipe automatically is usually the more efficient starting point.

What happens when a crew lead's iPad is lost on a rooftop job?

Rooftop and structural survey work means real physical risk to hardware: a dropped iPad, a device left behind after a long day on site. Confirm before rollout that your chosen platform's remote lock and wipe actually works over cellular, not just Wi-Fi, since a lost device on a job site rarely has Wi-Fi access. Build a small buffer of spare enrolled iPads into your field kit so a crew lead who loses a device isn't stuck without one for the rest of a project.

Document the loss the same day it happens, including roughly where and how, rather than treating each incident as a one-off. A pattern of losses at a specific stage of a rooftop job, say, during panel installation rather than the initial survey, tells you something about where your field kit or carrying process needs to change, and that pattern only becomes visible if someone is actually tracking it.

Executive Capability Standard

What Good Looks Like

An EPC firm with device management under control can reassign a returning crew lead's iPad the same day a project closes and knows exactly what happens to survey and permitting data on any device that leaves the company, whether it's owned by the firm or a subcontractor.

Building The Capability (5-Stage Skill Ladder)

1. Learn:List every field iPad and office device separately, and note which are company-owned versus subcontractor-owned devices used on your jobs.
2. Do Manually:Write an offboarding checklist for company-owned field iPads covering data wipe and reassignment when a project closes or a crew lead leaves.
3. Delegate:Give one project operations lead responsibility for field device recovery, separate from whoever manages office IT.
4. Automate:Tie field iPad enrollment to project assignment in Kandji or Rippling IT so a new project automatically configures the right permitting app version for its state.
5. Buy:Add centralized device group management across both field iPads and office machines once running project-specific configurations by hand becomes unmanageable.

How to Get Started

Disclosure: We may earn a commission if you buy through some links on this page. It doesn't change what we recommend.

Frequently Asked Questions

Should we enroll subcontractor crew tablets in our MDM platform?

No, in most cases. Subcontractor devices are their own property, and full MDM enrollment on them raises liability questions without much practical benefit. Scope subcontractor access to a permitting or project app with its own login instead, and revoke that access when the subcontract ends.

Can one platform handle different permitting app configurations for different states?

Both Kandji and Rippling IT support grouping devices and pushing different configurations to each group, which is useful if your permitting documentation format or app version differs by state. Set up device groups by project or region rather than assuming one configuration fits every job.

Is it worth running Kandji if our office is mostly Windows but the field is all iPads?

Often yes, specifically for the field iPad fleet, since Kandji's Apple-native controls are a strong fit for survey and permitting devices even if the office runs Windows. In that case, Rippling IT covering the office and Kandji covering the field iPads can be a reasonable two-platform split rather than a failure to consolidate.

Sources

Where we quote a benchmark, we show its source. Other figures in this guide are estimates or general guidance, so check them against your own numbers.

  1. Annual wage, General and Operations Managers (SOC 11-1021), US all industries. BLS OEWS May 2025, 2025.

Related Guides