[Q] KNOX and Rooted Device - AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin

I hope I am nut cluttering things up with a stupid question but I would like to find out if rooting and KNOX are mutually exclusive. My situation is that I will be moving from a personal to corporate liable account at work soon (taking my S4 with me) and their only requirement is securing the device on MobileIron with KNOX. I don't really mind the stock rom but there are two or three things I would like to be able to do on my device that require root access (mostly config toggles with a profile manager and using TiBu).
Thanks for any wisdom you can pass on.

drichter12 said:
I hope I am nut cluttering things up with a stupid question but I would like to find out if rooting and KNOX are mutually exclusive. My situation is that I will be moving from a personal to corporate liable account at work soon (taking my S4 with me) and their only requirement is securing the device on MobileIron with KNOX. I don't really mind the stock rom but there are two or three things I would like to be able to do on my device that require root access (mostly config toggles with a profile manager and using TiBu).
Thanks for any wisdom you can pass on.
Click to expand...
Click to collapse
This belongs in the Q&A forum. You know...since this is a Q.

Related

What is rooting?

Sorry to be so dense, but I have no idea what this is.could some one explain please. Isit similar to jail breaking of an iphone?
Because I already have downloaded games on my phone that I should of paid for and the it works perfectly fine.
Sorry for the dumb question again
alpystar said:
Sorry to be so dense, but I have no idea what this is.could some one explain please. Isit similar to jail breaking of an iphone?
Because I already have downloaded games on my phone that I should of paid for and the it works perfectly fine.
Sorry for the dumb question again
Click to expand...
Click to collapse
Google banned you or what? O_O
http://android-dls.com/wiki/index.php?title=Why_Root#You_never_know
Well "rooting" can be considered like jailbreaking but their are a few key differences (I have rooted and jailbroke before). Since Android offers many of the features iPhone doesent offer without jaybreak, rooting and Android allows the user to access many of the hidden features like setting the speed of the CPU. Rooting also allows custom roms to be installed on your phone. Roms are basically a moded version of the software your phone runs. A popular type of Rom called "Cyanogen" is available for a wide variety of Android devices. Rooting also allows free wireless tethering to your phone. What that means is that your phone emits WiFi and and of your WiFi powered devices such as an ipod or laptop can connect to it. Since rooting allows full user access to the processes of the Android phone, you warentee is also voided. But if you know what you want and how to keep your phone running then give it a shot. If you are new to the field rooting I would read more about it and how to fix it in recovery mode if you want to unroot your phone. I hope this helps.
Sent from my ADR6300 using XDA App
Its a reference to the underlying linux system, and goes back to Unix. Root was the primary user or superuser, and so root level access was the key to full admin control.
Your phone by default presents you with a limited user access, generally for your own good, by protecting access to files and folders you shouldnt normally access. Rooting refers to achieving full unrestricted access to the phone, thus enabling you to go beyond the normal user and start mucking about under the hood.
Quick question, since i stumbled upon this thread:
- Have there been cases of attempts at rooting carrier locked phones that resulted in bricks? Or is it generally safe to root carrier locked devices (if any Frenchies see this, i'm talking about SFR, Orange... more specifically.)
Cheers

New to Rooting/Droid?

hello, i am new to the rooting scene and droid. i have the AT&T S4 and i would like to remove all this crap that AT&T loads on the phone. i would also like to know that if i root my S4 can i use my sdcard to install apps to since the default "8gb" might not be enough so i bought a 32gb sdcard. please advise, i don't even know if this is the purpose of rooting a phone or not, sorry it its a dumb question.
Thanks
Well you're not new to xda. This belongs in Q&A, not development.
Sent from my SAMSUNG-SGH-I337 using Tapatalk 2
how do i move this to the correct area. i am not new to the forum new to droid. i many years ago i had a htc 6800 for verizon i used to "cook" roms for.
plwalsh88 said:
Well you're not new to xda. This belongs in Q&A, not development.
Sent from my SAMSUNG-SGH-I337 using Tapatalk 2
Click to expand...
Click to collapse
LilSnoop40 said:
how do i move this to the correct area. i am not new to the forum new to droid. i many years ago i had a htc 6800 for verizon i used to "cook" roms for.
Click to expand...
Click to collapse
You can click on the triangle in the upper right corner of the post, and report to a moderator for moving/maintenance. I already reported it for you.
Please read forum rules before posting
Questions and help issues go in Q&A
Thread moved
Thank you for your cooperation
Friendly Neighborhood Moderator
Development is only for developers to post work
LilSnoop40 said:
hello, i am new to the rooting scene and droid. i have the AT&T S4 and i would like to remove all this crap that AT&T loads on the phone. i would also like to know that if i root my S4 can i use my sdcard to install apps to since the default "8gb" might not be enough so i bought a 32gb sdcard. please advise, i don't even know if this is the purpose of rooting a phone or not, sorry it its a dumb question.
Thanks
Click to expand...
Click to collapse
It seems nobody has answered this, only moved your thread around. ^_^
In short, rooting just allows you to do things to your phone that normally would be against the manufacturer's/carrier's intent. One such example would be to remove carrier-added bloatware that is otherwise not removable. I personally use root for the following:
Titanium Backup Pro: This would let me backup my apps AND data for each app. Google does a decent job at backing up most my apps, but if I "sideload" an app (install from a different source other than the Play Store), I can back it up also. Plus Google doesn't always backup the DATA part of an app, which can be important for me (e.g. an authenticator, or RSA token for work). In addition, TiBu also allows you to easily "freeze" the bloatware, which prohibits it from running or showing up anywhere. This is usually a better option than completely uninstalling it, because it's usually much easier to recover from de-bloating the wrong bloat.
AdFree: An advertisement blocker. Typically Root is required to do this properly, as it modifies the "hosts" file on your android. In the end, it overrides your phone's DNS such that when an app or webpage requests data from a known advertising website, the phone will redirect the request to "nothing", and the ad will not show. Use with discretion - some people frown upon this because they "lose" revenue from the ads that are not shown. I won't comment further, fearing I'll start a verbal war here.
Greenify: Allows you to put certain apps to sleep while they are not being actively used. I use it for Facebook Messenger, because I've found that if this app is allowed to run in the background, it kills my battery. I leave Facebook running in the background, so that I'll still get notifications of new FB messages. Seems to work out for me well.
"Some Tethering Applications or Methods": Some of the better ways to tether/hotspot from your phone will require root. Again, I'll leave this one lie. Personally, I rarely use it, but I've been in a bind before without internet access, and I've needed to use it. I don't want to lose my unlimited data with AT&T, so I really have no choice to add a tethering plan anymore. Regardless, it's nice to know I have it available as an emergency option.
While I could recommend the root, I also have to warn you that this will effectively void your Warranty. There's ways (read through the forums here) to "hide" the root, by using SuperSU instead. But just be forewarned.
EDIT: Here's the link to the thread with the video - How to Root & Remove Unlock Icon & Unroot
First thing's first; learn correct terminology. The Galaxy S4 is certainly not a Droid phone. "Droid" is a term used by Verizon to attempt to label and unify their line of Android phones. "Android" is the name of Google's open-source mobile OS.
LilSnoop40, I got your private message, but I'm going to post some stuff here on this thread for everyone to see, just in case there are others that need some help with the rooting as well. Here goes:
The actual part of rooting your device is not too difficult using "Motochopper". The hardest part is just getting ADB setup and your phone recognized in ADB. For the Motochopper root and a basic outline of how to do the root, see this thread:
http://forum.xda-developers.com/showthread.php?t=2252248
Some recommendations:
- Be sure the phone is in USB Debugging mode. You'll have to enable the Developer options first. Let me know if you need help with this part. IT involves repeatedly clicking something in Settings to enable Dev options, and then there's just a checkbox to check after that to enable the debugging mode. This is "Step 3" in that thread I linked.
- Be sure you have the latest samsung drivers for your phone. There's a few threads around here that have JUST the drivers, and not the whole Samsung Kies software package (completely unnecessary!). If you can't find them, I'll see if I can search around and provide a link. This is "Step 2" of the thread.
- If you're in Debugging Mode, the drivers should also being installed for the "ADB device" - I forget the actual name of it, but it's a device on your computer that says something about ADB. This will only appear when you have the phone in debugging mode of course.
- super-important: When you run the root/hack/motochopper thing, you'll be prompted on your device to allow the ADB connection. It will say something about accepting a certificate or something like that. If you don't respond in 10 seconds, it will deny it, and the root will fail. This is "step 6" on the thread I linked.
Also, if you manage to do all this successfully, you'll see that the root was successful, and you'll have a new app on your phone: Superuser. This new app is what allows you to approve root access by other applications (more-or-less). A side-effect of having this app installed will be that the system will detect the presence of root, and when you boot your phone, it will show an open padlock and "custom". If you follow my basic instructions in this post, you can get rid of that.
Feel free to ask for any clarifications, etc. I'll try to be as helpful as possible.
First android phone I've owned since coming from years of iPhones, does the recent update that I downloaded affect the ability to root the device? I keep seeing people talking about versions but I don't see the numbers that they are saying so not sure what to look at, or if it matters at all? Will this work on any quadcore S4?
Skattered said:
First android phone I've owned since coming from years of iPhones, does the recent update that I downloaded affect the ability to root the device? I keep seeing people talking about versions but I don't see the numbers that they are saying so not sure what to look at, or if it matters at all? Will this work on any quadcore S4?
Click to expand...
Click to collapse
Short answer: No, the update won't affect your ability to root.
What carrier do you have? For the basic model number, you can read the label that's under your battery. The AT&T version, for example, will read: "SGH-I337". You can also get very specific information about your phone, the model number, build number, etc. bu doing the following: Go to Settings -> More... (The "Build number" is probably the numbers your looking for.)
If I'm not mistaken, the Motochopper root works on all I337 models?
Okay sweet, it is a 1337 (guess the signature tells me that too) and its on at&t
Sent from my SAMSUNG-SGH-I337 using Tapatalk 2

[Q] Rooting and KNOX

I hope I am not cluttering things up with a stupid question but I would like to find out if rooting and KNOX are mutually exclusive. My situation is that I will be moving from a personal to corporate liable account at work soon (taking my S4 with me) and their only requirement is securing the device on MobileIron with KNOX. I don't really mind the stock rom but there are two or three things I would like to be able to do on my device that require root access (mostly config toggles with a profile manager and using TiBu).
Thanks for any wisdom you can pass on.
drichter12 said:
I hope I am not cluttering things up with a stupid question but I would like to find out if rooting and KNOX are mutually exclusive. My situation is that I will be moving from a personal to corporate liable account at work soon (taking my S4 with me) and their only requirement is securing the device on MobileIron with KNOX. I don't really mind the stock rom but there are two or three things I would like to be able to do on my device that require root access (mostly config toggles with a profile manager and using TiBu).
Thanks for any wisdom you can pass on.
Click to expand...
Click to collapse
Same issue for me . . . any updates?
saintirish said:
Same issue for me . . . any updates?
Click to expand...
Click to collapse
Not yet.... I am moved over but they haven't set me up yet on MI. I reverted to un-rooted until then and will see what it looks like and maybe try rooting again after I am all set up.
I would not think that having administrator privileges on your device would prevent the Knox from working... I don't use Knox, though.

[Q] Device Control - Blacklist Applications

I am in the process of configuring a number of Note 4 (910F) with Android 4.4.4 for issue to employees within my department. To prevent people from using a corporate handset for their unauthorised purposes, the devices have to be as clean as possible, with access to base functions such as phone, contact, sms, camera and business applications, but remove access to unnecessary applications that are all part of the bloatware installed on them by the network operator.
For device management, we are using SOTI Mobicontrol. SOTI allows me to blacklist applications to prevent them from launching. For security and warranty reasons, rooting the devices to remove unwanted applications is not an option. Therefore the only option is to use the SOTI blacklist to remove access to the application icon for launch.
SOTI requires that I input the application path eg com.sec.android.samsung.samsungapps to add an application to the blacklist. For the majority of mainstream applications such as Amazon, Evernote etc these are readily available. I'm having difficulty in finding the details for things like S Voice, and other bloatware that has been installed as part of the ROM.
I have one device that I can use for testing, so can install applications onto that. Is there any application readily available which will be able to capture the application launch path for an app that doesn't require me to root the device? I've found a few lists on the forum that related to the same apps on different devices which has given me a starting point. Just thought there may be an easier way to find the information out from the device.
Any help gratefully accepted.
IP
Work smarter, not harder. 'Dilbert'
In my opinion, these forums are for helping others to be able to get the most out of their devices, to improve and to make them more enjoyable, that is not your case, here we come as enthusiasts, fans, you better hire a pro in order to accomplish your corporative goals
winol said:
In my opinion, these forums are for helping others to be able to get the most out of their devices, to improve and to make them more enjoyable, that is not your case, here we come as enthusiasts, fans, you better hire a pro in order to accomplish your corporative goals
Click to expand...
Click to collapse
Thanks for the reply. I am an enthusiast, both Android, HTC and Samsung. Where I've been happy to read through the forums and customise my own devices over the years, my 'enthusiast' status has now put me in a position at work where a little bit of advice would go a long way to helping me out.
It's all fine and well paying someone else to do something, but the advice I was looking for was to help me as learning a new skill or how to use a new tool or app is always useful and helps keep me in a job and putting food in the mouths of my children!
I could have easily not included anything about this being needed to help me out for a situation at work and got an entirely different response, but I'm an honest guy just looking for a little advice.
indigo_prime said:
I am in the process of configuring a number of Note 4 (910F) with Android 4.4.4 for issue to employees within my department. To prevent people from using a corporate handset for their unauthorised purposes, the devices have to be as clean as possible, with access to base functions such as phone, contact, sms, camera and business applications, but remove access to unnecessary applications that are all part of the bloatware installed on them by the network operator.
For device management, we are using SOTI Mobicontrol. SOTI allows me to blacklist applications to prevent them from launching. For security and warranty reasons, rooting the devices to remove unwanted applications is not an option. Therefore the only option is to use the SOTI blacklist to remove access to the application icon for launch.
SOTI requires that I input the application path eg com.sec.android.samsung.samsungapps to add an application to the blacklist. For the majority of mainstream applications such as Amazon, Evernote etc these are readily available. I'm having difficulty in finding the details for things like S Voice, and other bloatware that has been installed as part of the ROM.
I have one device that I can use for testing, so can install applications onto that. Is there any application readily available which will be able to capture the application launch path for an app that doesn't require me to root the device? I've found a few lists on the forum that related to the same apps on different devices which has given me a starting point. Just thought there may be an easier way to find the information out from the device.
Any help gratefully accepted.
IP
Work smarter, not harder. 'Dilbert'
Click to expand...
Click to collapse
Why you're not using knox? Which gives you & your team clean,safe & high security in a partition where your enterprise data & emails are there, also it's allows your team to enjoy device as it's.
I believe knox has been designed for this purpose only.
jdomadia said:
Why you're not using knox? Which gives you & your team clean,safe & high security in a partition where your enterprise data & emails are there, also it's allows your team to enjoy device as it's.
I believe knox has been designed for this purpose only.
Click to expand...
Click to collapse
Knox is an additional license for the SOTI software we are using for device management and my suggestion to include it as part of the project were ignored. Work want to 'see how it goes' without spending any more money!
If you want a better Corporate security:
KNOX
ROOT
Choose EITHER ONE or you are out of options.
KNOX is a corporate solution for most big enterprises provided by Samsung & it's a good investment.
ROOT gives you FULL control over any LINUX based OS (Android is a LINUX fork) & it's cheaper as it's FREE.
By using ROOT access, you can create secondary user that is very limited & password protected, even encrypted; in a way that it differs from Android guest mode.
Using ROOT access, you can even remove the BLOAT/Unnecessary apps entirely from your devices, therefore eliminates unwanted possible BUGs that may compromise your company securities.
Linux & Android security knowledge is highly required.
IMHO, for warranty issue, you can replace warranty with insurance.
...And from my knowledge, I've read that many people claim their warranty with KNOX counter tripped without problem from Samsung (But of course they un-ROOT it before claiming).
But remember, as long as your employee can access Download Mode, all of it is useless.

Samsung S8: completely remove Maas360 and KNOX?

Hi, I've been searching answers for this on Google for a while now but not found any sufficient answers.
I have a new phone that is completely locked down by company policies. I don't agree with these policies and they stop me from using my prefered launcher which needs root.
In short words, I want this crap off my phone!
Knox Enrollment Service is completely locked and cannot be disabled. Maas360 cannot be disabled and unlocked. I read that you cannot root a phone running Maas360 and KNOX the normal way.
Is there a ROM that would allow me to safely remove these services and turn my phone into a stock Samsung Galaxy S8 - or will that brick my phone?
Thanks for any advice
If its corporate policy, they will be notified if the phone is rooted or modified in any way and you could lose your job over it. They probably have strict policies in place to prevent access to company data. If you didnt agree then why did you add any company accounts to your phone?
whitedragon551 said:
If its corporate policy, they will be notified if the phone is rooted or modified in any way and you could lose your job over it. They probably have strict policies in place to prevent access to company data. If you didnt agree then why did you add any company accounts to your phone?
Click to expand...
Click to collapse
Thanks for your reply!
I don't know how these services work, but if I flash it with a custom rom that completely removes the old system and makes it into a "stock" Samsung phone. Then none of these services would be present to report any of these changes. I guess the receiving system would simply believe this phone is turned off and possibly after some weeks report that the phone hasn't reported in for X days. Thanks for worrying about me keeping my job, but that won't be a problem I assure you
mrkiwibanana said:
Thanks for your reply!
I don't know how these services work, but if I flash it with a custom rom that completely removes the old system and makes it into a "stock" Samsung phone. Then none of these services would be present to report any of these changes. I guess the receiving system would simply believe this phone is turned off and possibly after some weeks report that the phone hasn't reported in for X days. Thanks for worrying about me keeping my job, but that won't be a problem I assure you
Click to expand...
Click to collapse
It depends. I deploy MDM systems like this. Is this a corporate device or a personal device that is just enrolled?
whitedragon551 said:
It depends. I deploy MDM systems like this. Is this a corporate device or a personal device that is just enrolled?
Click to expand...
Click to collapse
Its a corporate device. When I first initialized the phone the KNOX or Maas360 started an enrollment service that was not optional.
mrkiwibanana said:
Its a corporate device. When I first initialized the phone the KNOX or Maas360 started an enrollment service that was not optional.
Click to expand...
Click to collapse
If its a corporate device there isnt anything you can do. It is enrolled at a physical hardware level in Android for Work. It will activate KNOX and call home every single time the device is wiped before you can proceed with any other functions. If it doesnt phone home to get the config, you cannot proceed with the setup. Its similar to DEP for Apple devices.
whitedragon551 said:
If its a corporate device there isnt anything you can do. It is enrolled at a physical hardware level in Android for Work. It will activate KNOX and call home every single time the device is wiped before you can proceed with any other functions. If it doesnt phone home to get the config, you cannot proceed with the setup. Its similar to DEP for Apple devices.
Click to expand...
Click to collapse
Thanks! Bad news for me, I guess I just have to bite into this sour lemon and accept. I will keep my hopes up that someone will find a way to blast past this in the future
Need help removing maas360
Hey, so my galaxy s8 had gone through the partial touch failure so as I was recommended I factory reset my phone and long story short I am stuck with maas360 and can't restore all my settings and such so I need to get it off preferably without a computer. (Also help with the touch screen would be nice but not crucial at this time)
Jok3Smok3 said:
Hey, so my galaxy s8 had gone through the partial touch failure so as I was recommended I factory reset my phone and long story short I am stuck with maas360 and can't restore all my settings and such so I need to get it off preferably without a computer. (Also help with the touch screen would be nice but not crucial at this time)
Click to expand...
Click to collapse
I love reading stories about MaaS360, I actually admin it for a company. If its a corporate device you may be sol, you may ask the admin to remove control, if it's a personal device to remove maas360.
Go into maas360- settings top right you should see 3 squares. hit remove MDM control after you remove control you can uninstall any part of MaaS360.
jmall84 said:
I love reading stories about MaaS360, I actually admin it for a company. If its a corporate device you may be sol, you may ask the admin to remove control, if it's a personal device to remove maas360.
Go into maas360- settings top right you should see 3 squares. hit remove MDM control after you remove control you can uninstall any part of MaaS360.
Click to expand...
Click to collapse
Hello . i installed an official software through odin to my s8 plus. Long story short, after factory resetting , i got this wierd app called "custom blocker" and in my device admin, i have knox customisation, knox enrollement and custom blocker restriction. this device is my own and not of any company. Why did these random apps appeared on my phone and how do i get rid of them? i am unable to update my phone or access the playstore.
Any help will be appreciated. Thanks.

Categories

Resources