Related
First off I take no credit for this at all. All credit goes to Rsotbiemrptson who is a Jedi master for creating this after many have tried and failed.
What you have here is a flashable crack to the HTC Mail.apk that will bypass any and all security administrators that may be otherwise forced onto your device when syncing to an exchange server.
To install:
1. You must remove all mail accounts that you have set up in the Mail app.
2. If you have any existing security administrators present from a previous exchange sync deactivate them.
3. Set your lock time out to none under security settings.
4. Reboot into recovery and wipe Dalvik Cache
5. Flash the attached file.
As with all mods or changes to ROMS do a complete backup in recovery.
If you find this useful please send all thanks to Rsotbiemrptson for cracking this bad boy.
Has anyone tried this?
sdorn77 said:
Has anyone tried this?
Click to expand...
Click to collapse
I don't really understand the point of it. Is there something wrong with Exchange on the Tbolt? Mine works fine.
Shiftyshadee said:
I don't really understand the point of it. Is there something wrong with Exchange on the Tbolt? Mine works fine.
Click to expand...
Click to collapse
This is for people who want to use their Exchange account on their Tbolt, but DON'T want to give their Exchange admin the ability to enforce security policies on their phone (like having to enter a PIN every time you unlock the screen). Sounds like your Exchange admin doesn't implement any of those policies, so you don't need this.
Is this something that was implemented in newer versions of Exchange? I think my company uses 2007 still. Might be why I haven't seen this.
i managed to get my gmail, hotmail an windjammercable mail setup though exchange on my thunderbolt, but i kept getting sync errors where it would try to sync all three emails like every 5 seconds when the phone was operating in peak time. My battery went from like 100 to like 75 in less than 20 minutes So i had to just delete all the email setting i changed an go back to what i had before.
Now, if install your mail akp will this stop the sync errors?
Shiftyshadee said:
Is this something that was implemented in newer versions of Exchange? I think my company uses 2007 still. Might be why I haven't seen this.
Click to expand...
Click to collapse
It's been around since at least the 2003 version but it's all optional settings, your admin may just not have them enabled. Mine doesn't.
Jacquestrapp said:
It's been around since at least the 2003 version but it's all optional settings, your admin may just not have them enabled. Mine doesn't.
Click to expand...
Click to collapse
Gotcha. Thanks for clearing that up for me
This absolutely works on all DAS BAMF roms but should work on any ROM including stock. You only need this if you have exchange policies pushed to your phone by your company. If you don't know what this is you prob don't need it.
I do not know if it will fix the afore mentioned sync errors but I would doubt it.
Here's a new question. When I had CM7 on my Incredible, Exchange wanted to setup device admin rights. Now on my Tbolt with Sense I don't get asked. Any idea why?
madroix said:
This absolutely works on all DAS BAMF roms but should work on any ROM including stock. You only need this if you have exchange policies pushed to your phone by your company. If you don't know what this is you prob don't need it.
I do not know if it will fix the afore mentioned sync errors but I would doubt it.
Click to expand...
Click to collapse
I have installed this on DAS BAMF remix v1.4 and it does work so far. I was able to remove the PIN lock and use a pattern lock, which was not permitted before. Also, I didn't get the exchange security policy notice when I added my exchange account. Syncing appears to be working properly as well so far.
The mod is quite honestly ridiculous. Whats the point of trying to have security setup and protect possible sensitive information, when you don't want an Admin to enforce security rights.
This 100% defeats the purpose that was set in place by Exchange for good reason's. I sure hope everyone understands the SERIOUS consequences of what could happen by flashing this and possibly leak sensitive data into the wrong hands.
^^ it's a very good point. One of the problems with AS and lock screens is that with the default client and iPhones you have to pin to unlock even the phone. Nothing to do with email, just the darn phone. So everyone hates it. I use Touchdown which only requires a pin if you go to check email. But it's $20. Anyway, be careful with hacks that bypass security in a workplace. It could be cause for termination.
I love my phone, I've loved ALL my devices... Yes, I use it for work with MS Exchange email (MS Consultant), and yes the pin/password policies are annoying.
But I'm not about to risk my job over some "hassle" of 3 seconds to enter a pin. Aren't our email Administrators able to see we bypassed this or no?
oc3rulz said:
The mod is quite honestly ridiculous. Whats the point of trying to have security setup and protect possible sensitive information, when you don't want an Admin to enforce security rights.
This 100% defeats the purpose that was set in place by Exchange for good reason's. I sure hope everyone understands the SERIOUS consequences of what could happen by flashing this and possibly leak sensitive data into the wrong hands.
Click to expand...
Click to collapse
To be honest, if someone wanted my data or emails a stupid 4 digit pin is not going to stop them. There are many ways in getting a persons email off of there phone without even unlocking it. This seems like it is for those small companies who's admins are security freaks and its really not needed. Granted, I am sure apple would not be happy if an employee used this app or an android phone lol
Sent from my ADR6400L using XDA Premium App
It is important to keep sensitive data secure. I think a properly set up pattern lock is as good as a 4 digit PIN. I use lookout to be able to remotely wipe if needed.
THANK YOU SO MUCH! Hats off to the dev.
Do I have to remove gmail accounts too, or just the active sync exchange accounts?
Sent from my ADR6400L using XDA App
chriskader said:
To be honest, if someone wanted my data or emails a stupid 4 digit pin is not going to stop them. There are many ways in getting a persons email off of there phone without even unlocking it. This seems like it is for those small companies who's admins are security freaks and its really not needed. Granted, I am sure apple would not be happy if an employee used this app or an android phone lol
Sent from my ADR6400L using XDA Premium App
Click to expand...
Click to collapse
Let them get in hacking your password/pin, you won't be held responsible. However if you have the phone pin/password disabled and they realize this you will be terminated. They will be able to see that you are bypassing security measures, and you could have lawsuit on your hands as well.
Please dont think that I am bashing the dev, I'm simply trying to let people know that they very well could and most likely lose their job and have possible legal action taken against them for using this. Cellphones are such a volatile thing anyhow, but giving them an easier way in is not a good idea, especially not while breaking company policy.
oc3rulz said:
Let them get in hacking your password/pin, you won't be held responsible. However if you have the phone pin/password disabled and they realize this you will be terminated. They will be able to see that you are bypassing security measures, and you could have lawsuit on your hands as well.
Please dont think that I am bashing the dev, I'm simply trying to let people know that they very well could and most likely lose their job and have possible legal action taken against them for using this. Cellphones are such a volatile thing anyhow, but giving them an easier way in is not a good idea, especially not while breaking company policy.
Click to expand...
Click to collapse
Like I said, they don't even Ned to unlock your phone e to read the emails on of. Google it.
Sent from my ADR6400L using XDA Premium App
I tried to set up an account to my Exchange email at work using the default email app on my TF101. When I set up an account it requires that I enable all of these security settings on the tab like having a PIN and encrypting data. I don't want to do all of that. I realize that this is something set up by my Exchange administrator but I am not sure they even did it knowingly and anyway I don't want to have to deal with it to check email.
Does anyone know how to bypass this? Searches of these forums and the web show that there are some modded email apks for other platforms that let you bypass the security settings. I have not seen any such mods for ICS on the TF101.
Thanks in advance for your help.
Hello,
I do not believe the stock email is able to handle the security settings from an exchange server. You need to look at other programs like Moxier Mail or TouchDown.
+1 for touch down. Works great but it is $20
Enhanced email is another option. I got it from free app of the day by Amazon. At first, it did not work on android 3.0+, but it works fine now. It gives you the option to ignore security policies.
Alternatively, if you decompile the email.apk, I believe you can force a variable so that the email app always tells the exchange server you have sufficient security enabled (I'm not exactly sure where must be changed).
tonyz3 said:
+1 for touch down. Works great but it is $20
Click to expand...
Click to collapse
I couldn't agree more. Do the trial first to see if you like it. I don't recommend bypassing the security. You can unknowingly pass a virus through your corporate exchange. Hopefully, one day, they will resolve this issue in the Android exchange client.
tonyz3 said:
+1 for touch down. Works great but it is $20
Click to expand...
Click to collapse
+1... Touchdown. Forget any other Exchange apps.
+1 for Enhanced Email - optionally bypasses the admin security settings - works fine on Honeycomb and ICS too.
Exchange Admin
Hello,
When setting up exchange servers in the past, the default exchange policy is to have those features enabled. Even if those are DISABLED, the tablet will still ask to create the partnership. I believe this is so it can be wiped remotely. It seems ICS just tells you it is going to do all of those things as a generic warning. I have noticed this is only on ICS though. If you click ok, it shouldn't ask you to create a PIN or anything if it isn't actually required. We currently only have exchange 2010 in production in a test environment, so I have yet to look for the setting to disable this feature entirely. Hope this helps you understand how it works at least a little.
We use a galaxy tab 2 here at work with active-sync and exchange etc..
Seems like once every 2 weeks I'll use the native email app from 4.0.4 and the exchange account has been completely removed?
We also had this happen once with our Galaxy 1 tab as well. The exchange email account was completely removed. Like it had never been setup.
Any tips or ideas of why or what happened? I need to explain this to someone but can't think of where to begin why the issue happened and how to resolve it.
The other interesting fact is that we have so many different android devices on the same network without active-sync/exchange issues. These devices rage from 2.3.6 to the latest.... they don't seem to have their exchange accounts removed ever...
Thanks for any tips. I've been scratching my head at this a long time and can't seem to make any progress.
Ok, these permissions required for Corporate Email is absolutely ridiculous. The account wants full admin access over my phone. Basically if i give it permission my IT guy can factory reset my phone, add and change email accounts, enable/disable wifi, network access see my files, incoming/outgoing calls, messages, etc..
thats NOT going to happen. My question is, since Im using Knox, and im using the Email on Knox, and Knox is just a VM... will those permissions only apply to the VM container? Meaning the admin will not technically be able to factory reset my entire phone, (or view my entire phone contents) Just the "things" in the KNOX container? so a factory reset (if i get fired for instance) would only "factory reset" the knox container??
I searched for clarification on this but couldnt find anything. Thanks for the help
Mad_Scientist_565 said:
Ok, these permissions required for Corporate Email is absolutely ridiculous. The account wants full admin access over my phone. Basically if i give it permission my IT guy can factory reset my phone, add and change email accounts, enable/disable wifi, network access see my files, incoming/outgoing calls, messages, etc..
thats NOT going to happen. My question is, since Im using Knox, and im using the Email on Knox, and Knox is just a VM... will those permissions only apply to the VM container? Meaning the admin will not technically be able to factory reset my entire phone, (or view my entire phone contents) Just the "things" in the KNOX container? so a factory reset (if i get fired for instance) would only "factory reset" the knox container??
I searched for clarification on this but couldnt find anything. Thanks for the help
Click to expand...
Click to collapse
bump!! still wondeirng the answer to this one.
Mad_Scientist_565 said:
bump!! still wondeirng the answer to this one.
Click to expand...
Click to collapse
+1
Interesting thought. I want to know that too. Can anyone test this? I can volunteer if you need people to test this. I have stock Note 3 and working knox that I can set up. I don't have any data I care about on my phone if it is wiped.
rahulisola said:
+1
Interesting thought. I want to know that too. Can anyone test this? I can volunteer if you need people to test this. I have stock Note 3 and working knox that I can set up. I don't have any data I care about on my phone if it is wiped.
Click to expand...
Click to collapse
i dont even know how one would have access to this. i mean there must be some kind of software or something that goes along with the microsoft exchange server that allows them to "see" your device, and control it.. i obviously dont have that software.. I do have google apps for my email, and i know it can remote wipe users phones, but i dont think its the same "level" of wipe.
rahu... in stall the app "google apps device policy" im going to set you up an email/password under my domain, that you can then use to configure your email under knox. We can give it a shot.
Mad_Scientist_565 said:
Ok, these permissions required for Corporate Email is absolutely ridiculous. The account wants full admin access over my phone. Basically if i give it permission my IT guy can factory reset my phone, add and change email accounts, enable/disable wifi, network access see my files, incoming/outgoing calls, messages, etc..
thats NOT going to happen. My question is, since Im using Knox, and im using the Email on Knox, and Knox is just a VM... will those permissions only apply to the VM container? Meaning the admin will not technically be able to factory reset my entire phone, (or view my entire phone contents) Just the "things" in the KNOX container? so a factory reset (if i get fired for instance) would only "factory reset" the knox container??
I searched for clarification on this but couldnt find anything. Thanks for the help
Click to expand...
Click to collapse
As far as I know one of the permissions for the Knox admin is to full-wipe the phone not just the Knox container - so that WILL factory-reset your phone (just like Samsung can do that from the samsung account). I remember seeing at least one guy on the web complaining about exactly that happening to him from Knox when he moved to another job.
If anyone wants to test a phone wipe, send me a pm. I could set something up temporarily.
Sent from my SM-N9005 using xda app-developers app
If anyone is interested, the Exchange service on the G4 (at least the T-Mobile version) can be disabled via the apps menu and Google Exchange services can be installed.
This will allow you to use the GMail app with Exchange enabled hosts, like Hotmail/Outlook.com and retain push mail, contact and calendar sync.
Recommended steps:
If you have any accounts using email and exchange, remove them first.
Open Settings/General/Apps/All
Tap on Exchange (The LG one with the blue icon)
Force stop
Disable the Exchange Service
(Restarting your phone is recommended at this point)
Install Google Exchange Services
(Restarting your phone is recommended at this point as well)
Open GMail and you will have Exchange as an option when you add an account.
This is gold to me.
Thanks.
sweet thx!
edit: oops that didn't work for me it gets stuck constantly sync'ing and has some exchange service crashes hmm...
Works fine here so far. I just wish you could disable the remote administration requiring your device to use a PIN. I'd love to use Smart Lock.
jbdan said:
sweet thx!
edit: oops that didn't work for me it gets stuck constantly sync'ing and has some exchange service crashes hmm...
Click to expand...
Click to collapse
It's important that you remove any old exchange accounts in email first, then force close the LG exchange service and disable it. If you don't disable it, then GMail will get stuck syncing.
Joe USer said:
It's important that you remove any old exchange accounts in email first, then force close the LG exchange service and disable it. If you don't disable it, then GMail will get stuck syncing.
Click to expand...
Click to collapse
Thanks I did that I'll try it again.
jbdan said:
Thanks I did that I'll try it again.
Click to expand...
Click to collapse
Did you ever get it to work? If not, which model of the phone do you have?
Directions worked perfectly. Thank you.
Joe USer said:
Did you ever get it to work? If not, which model of the phone do you have?
Click to expand...
Click to collapse
I haven't tried it again yet my life is crazy with a 3 yr old and twins I've been using stock g4 email app. I'll try it this week and report back thanks. Tmo version
geoff5093 said:
Works fine here so far. I just wish you could disable the remote administration requiring your device to use a PIN. I'd love to use Smart Lock.
Click to expand...
Click to collapse
Just waiting on root so I can keep my damn unlock screen without having to put in an 8 character password with numbers and special characters every time I want to unlock my phone.
I might just bite the bullet and buy touchdown for $20 because I heard it doesn't need to apply the permissions to your whole phone but just the app.
geoff5093 said:
Works fine here so far. I just wish you could disable the remote administration requiring your device to use a PIN. I'd love to use Smart Lock.
Click to expand...
Click to collapse
centran said:
Just waiting on root so I can keep my damn unlock screen without having to put in an 8 character password with numbers and special characters every time I want to unlock my phone.
I might just bite the bullet and buy touchdown for $20 because I heard it doesn't need to apply the permissions to your whole phone but just the app.
Click to expand...
Click to collapse
This. I have used Smart Lock on my N5 with no problems even though we are required to have a PIN. Fired up the G4 and immediately noticed once I setup email Smart Lock was grey and can't be used. I thought that by switching to Gmail for my Exchange email I could get around that only to find Gmail doesn't have Exchange support on this phone (until I found this thread).
Has anyone that has followed the instructions at the top been able to get Smart Lock working when Gmail is used for Exchange email? Or does Touchdown get around this?
I am going to test this out tonight - can't goof around too much while on the job!!
centran said:
Just waiting on root so I can keep my damn unlock screen without having to put in an 8 character password with numbers and special characters every time I want to unlock my phone.
I might just bite the bullet and buy touchdown for $20 because I heard it doesn't need to apply the permissions to your whole phone but just the app.
Click to expand...
Click to collapse
Does that also sync your calendar and contacts?
flippingout said:
This. I have used Smart Lock on my N5 with no problems even though we are required to have a PIN. Fired up the G4 and immediately noticed once I setup email Smart Lock was grey and can't be used. I thought that by switching to Gmail for my Exchange email I could get around that only to find Gmail doesn't have Exchange support on this phone (until I found this thread).
Has anyone that has followed the instructions at the top been able to get Smart Lock working when Gmail is used for Exchange email? Or does Touchdown get around this?
I am going to test this out tonight - can't goof around too much while on the job!!
Click to expand...
Click to collapse
Outlook bypasses the security requirement, but it appears to only sync email, not calendars or contacts. You get prompted that Exchange wants you to accept these changes, but you have an option to deny them.
geoff5093 said:
Does that also sync your calendar and contacts?
Outlook bypasses the security requirement, but it appears to only sync email, not calendars or contacts. You get prompted that Exchange wants you to accept these changes, but you have an option to deny them.
Click to expand...
Click to collapse
I'll have to look at that new outlook app closer then. It prompted me for the security permissions to wipe phone, pin, and all that crap so I exited out.
Touchdown is supposed to be all one contained environment so I don't think it syncs with the default apps. I could be wrong as I have never tried it since I always got a PIN bypasser working on my old phones. It is free for a month so try it out! I don't care about contacts and it would be nice to have calendar but I'm not heartbroken over it. What I would like to know is if you still get a notification of new mail. I would assume so but aren't allowed to preview it which is fine but I at least need to know I have mail.
centran said:
I'll have to look at that new outlook app closer then. It prompted me for the security permissions to wipe phone, pin, and all that crap so I exited out.
Touchdown is supposed to be all one contained environment so I don't think it syncs with the default apps. I could be wrong as I have never tried it since I always got a PIN bypasser working on my old phones. It is free for a month so try it out! I don't care about contacts and it would be nice to have calendar but I'm not heartbroken over it. What I would like to know is if you still get a notification of new mail. I would assume so but aren't allowed to preview it which is fine but I at least need to know I have mail.
Click to expand...
Click to collapse
Yeah that request seems to be standard whenever you setup Outlook, regardless of app. It was when it came to the lock screen settings, it allowed me to dismiss it.
I just tried the Outlook app and it required far less permissions then adding an exchange email through the android/lg settings. The regular settings wanted pretty much everything. Wipe, disable camera, password type, password length, password expiration, encrypt phone, disable sd card, etc etc. It had everything and probably because my company just checked everything. Now the question is if it would really do any of those things probably not because that it a further settings in Exchange but it just wants to be able to do all that.
The Outlook just wanted password rules, unlock attempts, lock screen, and encrypt phone. It asked to encrypt and I said no and phone still works. I was able to keep pattern lock screen but it disabled everything else besides pin and password. The Outlook app does not integrate well with Android so everything is contained in it's own app. I don't think it does notifications either since I sent an email and waited a good 10 minutes. My phone never went off but I open the app the email shows up but never as a notification.
So maybe the Outlook app will get you by for the time being.
Hrm - I'm on an LG G4 (EU H815 model, unlocked). No Google Exchange Services visible or available in the Play Store ...
I also have an old Galaxy S3 running 5.1.1 (PacMan rom) - that has Gmail with Exchange working just fine. It has the same version of Gmail as on the G4, but also has "Exchange Services" running. I can't find any other information on that though.
[EDIT] I just checked the link in the OP which looks like the latest apk, but the button for Play Store doesn't work - URL doesn't exist.
Quick question - I haven't disabled LG Exchange on the G4 yet - when I do it says that the app will be hidden from then on. What if one wants to re-enable it - will it still be visible on the Apps menu ?
TIA
D -
Halfwalker said:
Hrm - I'm on an LG G4 (EU H815 model, unlocked). No Google Exchange Services visible or available in the Play Store ...
I also have an old Galaxy S3 running 5.1.1 (PacMan rom) - that has Gmail with Exchange working just fine. It has the same version of Gmail as on the G4, but also has "Exchange Services" running. I can't find any other information on that though.
[EDIT] I just checked the link in the OP which looks like the latest apk, but the button for Play Store doesn't work - URL doesn't exist.
Quick question - I haven't disabled LG Exchange on the G4 yet - when I do it says that the app will be hidden from then on. What if one wants to re-enable it - will it still be visible on the Apps menu ?
TIA
D -
Click to expand...
Click to collapse
Yes, just go to your apps in settings and it will be under 'disabled'.
Just switched things over, and Gmail Exchange is working nicely now
flippingout said:
This. I have used Smart Lock on my N5 with no problems even though we are required to have a PIN. Fired up the G4 and immediately noticed once I setup email Smart Lock was grey and can't be used. I thought that by switching to Gmail for my Exchange email I could get around that only to find Gmail doesn't have Exchange support on this phone (until I found this thread).
Has anyone that has followed the instructions at the top been able to get Smart Lock working when Gmail is used for Exchange email? Or does Touchdown get around this?
I am going to test this out tonight - can't goof around too much while on the job!!
Click to expand...
Click to collapse
Have you been able to figure this out? I have coworkers on a N6, N5, and a HTC One (M7), who all have our Corporate E-mail linked to their phone via either gmail or the htc e-mail app. They can all access their respective Smart Lock settings. On my phone, its grayed out.
Confused on what this does? Just lets you add a second exchange account to gmail? Are emails mixed together or do they remain separated? I like having my Email and Gmail in 2 different apps. I also like the LG email app.