Shop floor devices that never update mid-shift
A manufacturer's devices sit beside the line: tablets for work instructions, PCs that drive machines, engineering workstations and office laptops, often across several plants. Purple MDM groups them by plant and role, times updates for planned downtime, and keeps the Linux and Windows machines beside the line to the same checks as the office.
- MacIn its desired state
- Windows PCOffline, still in its desired state
- Linux serverIn its desired state
What you are up against
Production first, updates second
An update at the wrong time
A line-side PC that reboots for an update mid-shift stops the line, and the MDM that did it is never trusted again.Devices nobody manages
Rugged tablets and Linux machines beside the line sit outside every tool, patched by nobody.Several plants, one team
A central team and a plant that is two hours away, with devices that have to be fixed today.
How Purple MDM is set up
How Purple MDM is set up for a manufacturer
- A group per plant and roleLine-side, engineering and office devices each carry their settings, layered with the plant's, previewed per device.
- Updates in planned downtimeOS update deadlines and deferrals set per group, so line-side devices update in the maintenance window and office laptops on their own schedule.
- Linux and Windows beside the lineThe Purple agent brings Ubuntu and RHEL machines and Windows PCs into the same checks, scripts and patching, and keeps their settings even offline.
- Fixes without a visitKnown fixes sent automatically, scripts run from the console with their output recorded, and a self-service catalog for the shift lead.
See everything Purple MDM doesWorkplace WiFi on Purple Access
Security baseline · Office PCs
- BitLocker with key escrowOn
- Windows LAPSOn
- Defender and firewall baselineOn
- Screen lock after 5 minutesOn
- Local admin rights time-limitedOn
- Developer modeBlocked
Meets the baseline
OFFICE-PC-014OFFICE-PC-022OFFICE-PC-031Still missing
OFFICE-PC-009: BitLocker offThe fleet
The plant fleet
- Line-side tabletsAndroid Enterprise or supervised iPads, locked to the work-instruction app.
- Machine and HMI PCsWindows 11 with update windows that respect production.
- Linux machinesThe Purple agent for checks, patching and scripts, even offline.
- Engineering workstationsCAD and tooling apps by group, encryption with key escrow.
- Office laptopsCompany sign-in, patching and compliance.
- Plant WiFiDevice certificates renewed automatically; with Purple Access, health decides who joins.
FAQ
Questions we hear from teams like yours
Can we stop updates during a shift?
Yes. Update deadlines and deferrals are set per group, so line-side devices update in planned downtime and nothing reboots mid-shift.
Does Purple MDM manage the Linux machines beside the line?
Yes, through the Purple agent on Ubuntu and RHEL: encryption and update checks, patching, scripts and WiFi certificates, with settings kept even offline.
Can a plant fix its own devices?
A shift lead with the Helpdesk role can lock and fix devices but not wipe them or see recovery keys, and the self-service catalog handles routine installs.
Does Purple MDM manage our machines' sensors and controllers?
Purple MDM manages Macs, iPhones, iPads, Windows PCs, Android devices, Chromebooks and Linux machines. Sensors and controllers join the network on their own keys through Purple Access.
Other industries
Small business
A mixed fleet of Macs, PCs and phones run by whoever has the time, not a specialist.Corporate offices
Every laptop encrypted, patched and signed in with the company identity, with the evidence kept.Professional services
Encrypted, patched laptops with the evidence a client's security questionnaire asks for.
See every device in one console, on your own fleet
Tell us which devices you run, how many, and what you manage them with today. The Purple team shows you Purple MDM on a fleet like yours: zero-touch enrollment, a change previewed and undone, a failed check explained in a sentence, and a device moved off the network and back. Already a Purple customer? Sign in to the app with your Purple account.
- We map your fleetA Purple expert maps your platforms, your groups and how devices arrive today, and answers your questions on enrollment, data regions, roles and migration.
- You see it on devices like yoursA demo of zero-touch enrollment, a previewed change, a failed check explained in plain English and, with Purple Access, a device moved off the network and back.
- You get your quotePriced per device, per month, for the platforms you run, direct or through your Purple partner, with a move in waves planned if you are coming from another MDM.
Your demo
Tell us your fleet. We show you Purple MDM running it.
A Purple expert comes back to book a demo on devices like yours, from the team behind Purple WiFi and Purple Access.