Related
My company upgraded their exchange server, and now requires lock screens (PIN or password, no pattern) if we want to access email on our personal phones.
As someone with a rooted phone, is there any way to disable this and still have access to my corporate email? It's really annoying to have to punch in a PIN 500 times a day, but I really do need email access on my phone as much as I'm on the road.
I think this has been discussed before, but maybe on a different phone (HeroC maybe) But essentially no there isn't away - to access the server the phone goes through a series of checks, one of the checks being that an appropraite pin was entered to unlock the phone. if that check fails, authentication to the server is denied. Someone *might* be able to spoof the check in the email app, but I am fairly sure its actually OS deep, not just within the mail client.
So it would be a large undertaking and potentially could cause you to loose your job by by passing security measures. I know I wouldn't think twice about firing someone who did it on my network.
No way that I know of, and is something that is on pretty much everyphone. Blackberrys the security policies can even block installation of 3rd party applications.
What's even more fun for you, is the ability of your it staff to lock you out of your phone or even remotely wipe your phone.
Sent from my SPH-D700 using XDA Premium App
Restola said:
My company upgraded their exchange server, and now requires lock screens (PIN or password, no pattern) if we want to access email on our personal phones.
As someone with a rooted phone, is there any way to disable this and still have access to my corporate email? It's really annoying to have to punch in a PIN 500 times a day, but I really do need email access on my phone as much as I'm on the road.
Click to expand...
Click to collapse
I think you are stuck. Do you have the option of getting a company-supplied phone to access the company email, and keep your personal Android separate?
There is a thread in Q&A talking about an app that does this.
Do you BONSAI?
Actually there is a way I had to do it to my coworkers phone for her pattern lock
What u need: locked phone phones #, wifi or u can use wifi tether if u have another phone
1. Call the persons phone #
2. Leave phone call connected on both sides
3. Connect to wifi if u havnt already
4. Goto settings/accounts manager setting or what ever and log into a diff google account then it should require u to change the password to by pass it
Should work hopefully I read this thread correctly and answered appropietly
Edit sorry read it wrong and u don't think there is a way
My way is how u get around it
Sent from my Epic 4.1g bonsai plant
Here's the link to the thread that may help:
http://forum.xda-developers.com/showthread.php?t=1033017
I thought it was just being big brother, turns out its a regulatory requirement since we were bought by a publicly traded company. I guess I'll deal with it. If it pisses me off too much I'll just get rid of my exchange account on my phone and stop responding to emails when I'm not at my desk.
A possible workaround would be to try touhdwn for your exchange mail instead of the default mail client. Its a paid app but there should be a demo version in the market. I have a dp2 for work and they pay for touchdown for us. When using touhdown it pin locks just the app instead of whole phone. On my Droid at least moto customized the screen timeout and lock to be different timers so I found the pin to be less annoying than the interface of touchdown.
With the epics slightly bigger screen to make the TD interface a litte less annoying(lots of small buttons instead of utilizing menu button) and since epics lock is all or nothing I think I might actually use TD on my epic if I were getting my corp email there.
While not a complete removal of the pin maybe it would at least make it less annoying for you. Plus I'd guess if work catches you wihout a pin it might not go over well. TD solution lets you protect the email if you lose your phone, and does have a remote wipe for the same scenario.
I tried to set up an account to my Exchange email at work using the default email app on my TF101. When I set up an account it requires that I enable all of these security settings on the tab like having a PIN and encrypting data. I don't want to do all of that. I realize that this is something set up by my Exchange administrator but I am not sure they even did it knowingly and anyway I don't want to have to deal with it to check email.
Does anyone know how to bypass this? Searches of these forums and the web show that there are some modded email apks for other platforms that let you bypass the security settings. I have not seen any such mods for ICS on the TF101.
Thanks in advance for your help.
Hello,
I do not believe the stock email is able to handle the security settings from an exchange server. You need to look at other programs like Moxier Mail or TouchDown.
+1 for touch down. Works great but it is $20
Enhanced email is another option. I got it from free app of the day by Amazon. At first, it did not work on android 3.0+, but it works fine now. It gives you the option to ignore security policies.
Alternatively, if you decompile the email.apk, I believe you can force a variable so that the email app always tells the exchange server you have sufficient security enabled (I'm not exactly sure where must be changed).
tonyz3 said:
+1 for touch down. Works great but it is $20
Click to expand...
Click to collapse
I couldn't agree more. Do the trial first to see if you like it. I don't recommend bypassing the security. You can unknowingly pass a virus through your corporate exchange. Hopefully, one day, they will resolve this issue in the Android exchange client.
tonyz3 said:
+1 for touch down. Works great but it is $20
Click to expand...
Click to collapse
+1... Touchdown. Forget any other Exchange apps.
+1 for Enhanced Email - optionally bypasses the admin security settings - works fine on Honeycomb and ICS too.
Exchange Admin
Hello,
When setting up exchange servers in the past, the default exchange policy is to have those features enabled. Even if those are DISABLED, the tablet will still ask to create the partnership. I believe this is so it can be wiped remotely. It seems ICS just tells you it is going to do all of those things as a generic warning. I have noticed this is only on ICS though. If you click ok, it shouldn't ask you to create a PIN or anything if it isn't actually required. We currently only have exchange 2010 in production in a test environment, so I have yet to look for the setting to disable this feature entirely. Hope this helps you understand how it works at least a little.
If anyone is interested, the Exchange service on the G4 (at least the T-Mobile version) can be disabled via the apps menu and Google Exchange services can be installed.
This will allow you to use the GMail app with Exchange enabled hosts, like Hotmail/Outlook.com and retain push mail, contact and calendar sync.
Recommended steps:
If you have any accounts using email and exchange, remove them first.
Open Settings/General/Apps/All
Tap on Exchange (The LG one with the blue icon)
Force stop
Disable the Exchange Service
(Restarting your phone is recommended at this point)
Install Google Exchange Services
(Restarting your phone is recommended at this point as well)
Open GMail and you will have Exchange as an option when you add an account.
This is gold to me.
Thanks.
sweet thx!
edit: oops that didn't work for me it gets stuck constantly sync'ing and has some exchange service crashes hmm...
Works fine here so far. I just wish you could disable the remote administration requiring your device to use a PIN. I'd love to use Smart Lock.
jbdan said:
sweet thx!
edit: oops that didn't work for me it gets stuck constantly sync'ing and has some exchange service crashes hmm...
Click to expand...
Click to collapse
It's important that you remove any old exchange accounts in email first, then force close the LG exchange service and disable it. If you don't disable it, then GMail will get stuck syncing.
Joe USer said:
It's important that you remove any old exchange accounts in email first, then force close the LG exchange service and disable it. If you don't disable it, then GMail will get stuck syncing.
Click to expand...
Click to collapse
Thanks I did that I'll try it again.
jbdan said:
Thanks I did that I'll try it again.
Click to expand...
Click to collapse
Did you ever get it to work? If not, which model of the phone do you have?
Directions worked perfectly. Thank you.
Joe USer said:
Did you ever get it to work? If not, which model of the phone do you have?
Click to expand...
Click to collapse
I haven't tried it again yet my life is crazy with a 3 yr old and twins I've been using stock g4 email app. I'll try it this week and report back thanks. Tmo version
geoff5093 said:
Works fine here so far. I just wish you could disable the remote administration requiring your device to use a PIN. I'd love to use Smart Lock.
Click to expand...
Click to collapse
Just waiting on root so I can keep my damn unlock screen without having to put in an 8 character password with numbers and special characters every time I want to unlock my phone.
I might just bite the bullet and buy touchdown for $20 because I heard it doesn't need to apply the permissions to your whole phone but just the app.
geoff5093 said:
Works fine here so far. I just wish you could disable the remote administration requiring your device to use a PIN. I'd love to use Smart Lock.
Click to expand...
Click to collapse
centran said:
Just waiting on root so I can keep my damn unlock screen without having to put in an 8 character password with numbers and special characters every time I want to unlock my phone.
I might just bite the bullet and buy touchdown for $20 because I heard it doesn't need to apply the permissions to your whole phone but just the app.
Click to expand...
Click to collapse
This. I have used Smart Lock on my N5 with no problems even though we are required to have a PIN. Fired up the G4 and immediately noticed once I setup email Smart Lock was grey and can't be used. I thought that by switching to Gmail for my Exchange email I could get around that only to find Gmail doesn't have Exchange support on this phone (until I found this thread).
Has anyone that has followed the instructions at the top been able to get Smart Lock working when Gmail is used for Exchange email? Or does Touchdown get around this?
I am going to test this out tonight - can't goof around too much while on the job!!
centran said:
Just waiting on root so I can keep my damn unlock screen without having to put in an 8 character password with numbers and special characters every time I want to unlock my phone.
I might just bite the bullet and buy touchdown for $20 because I heard it doesn't need to apply the permissions to your whole phone but just the app.
Click to expand...
Click to collapse
Does that also sync your calendar and contacts?
flippingout said:
This. I have used Smart Lock on my N5 with no problems even though we are required to have a PIN. Fired up the G4 and immediately noticed once I setup email Smart Lock was grey and can't be used. I thought that by switching to Gmail for my Exchange email I could get around that only to find Gmail doesn't have Exchange support on this phone (until I found this thread).
Has anyone that has followed the instructions at the top been able to get Smart Lock working when Gmail is used for Exchange email? Or does Touchdown get around this?
I am going to test this out tonight - can't goof around too much while on the job!!
Click to expand...
Click to collapse
Outlook bypasses the security requirement, but it appears to only sync email, not calendars or contacts. You get prompted that Exchange wants you to accept these changes, but you have an option to deny them.
geoff5093 said:
Does that also sync your calendar and contacts?
Outlook bypasses the security requirement, but it appears to only sync email, not calendars or contacts. You get prompted that Exchange wants you to accept these changes, but you have an option to deny them.
Click to expand...
Click to collapse
I'll have to look at that new outlook app closer then. It prompted me for the security permissions to wipe phone, pin, and all that crap so I exited out.
Touchdown is supposed to be all one contained environment so I don't think it syncs with the default apps. I could be wrong as I have never tried it since I always got a PIN bypasser working on my old phones. It is free for a month so try it out! I don't care about contacts and it would be nice to have calendar but I'm not heartbroken over it. What I would like to know is if you still get a notification of new mail. I would assume so but aren't allowed to preview it which is fine but I at least need to know I have mail.
centran said:
I'll have to look at that new outlook app closer then. It prompted me for the security permissions to wipe phone, pin, and all that crap so I exited out.
Touchdown is supposed to be all one contained environment so I don't think it syncs with the default apps. I could be wrong as I have never tried it since I always got a PIN bypasser working on my old phones. It is free for a month so try it out! I don't care about contacts and it would be nice to have calendar but I'm not heartbroken over it. What I would like to know is if you still get a notification of new mail. I would assume so but aren't allowed to preview it which is fine but I at least need to know I have mail.
Click to expand...
Click to collapse
Yeah that request seems to be standard whenever you setup Outlook, regardless of app. It was when it came to the lock screen settings, it allowed me to dismiss it.
I just tried the Outlook app and it required far less permissions then adding an exchange email through the android/lg settings. The regular settings wanted pretty much everything. Wipe, disable camera, password type, password length, password expiration, encrypt phone, disable sd card, etc etc. It had everything and probably because my company just checked everything. Now the question is if it would really do any of those things probably not because that it a further settings in Exchange but it just wants to be able to do all that.
The Outlook just wanted password rules, unlock attempts, lock screen, and encrypt phone. It asked to encrypt and I said no and phone still works. I was able to keep pattern lock screen but it disabled everything else besides pin and password. The Outlook app does not integrate well with Android so everything is contained in it's own app. I don't think it does notifications either since I sent an email and waited a good 10 minutes. My phone never went off but I open the app the email shows up but never as a notification.
So maybe the Outlook app will get you by for the time being.
Hrm - I'm on an LG G4 (EU H815 model, unlocked). No Google Exchange Services visible or available in the Play Store ...
I also have an old Galaxy S3 running 5.1.1 (PacMan rom) - that has Gmail with Exchange working just fine. It has the same version of Gmail as on the G4, but also has "Exchange Services" running. I can't find any other information on that though.
[EDIT] I just checked the link in the OP which looks like the latest apk, but the button for Play Store doesn't work - URL doesn't exist.
Quick question - I haven't disabled LG Exchange on the G4 yet - when I do it says that the app will be hidden from then on. What if one wants to re-enable it - will it still be visible on the Apps menu ?
TIA
D -
Halfwalker said:
Hrm - I'm on an LG G4 (EU H815 model, unlocked). No Google Exchange Services visible or available in the Play Store ...
I also have an old Galaxy S3 running 5.1.1 (PacMan rom) - that has Gmail with Exchange working just fine. It has the same version of Gmail as on the G4, but also has "Exchange Services" running. I can't find any other information on that though.
[EDIT] I just checked the link in the OP which looks like the latest apk, but the button for Play Store doesn't work - URL doesn't exist.
Quick question - I haven't disabled LG Exchange on the G4 yet - when I do it says that the app will be hidden from then on. What if one wants to re-enable it - will it still be visible on the Apps menu ?
TIA
D -
Click to expand...
Click to collapse
Yes, just go to your apps in settings and it will be under 'disabled'.
Just switched things over, and Gmail Exchange is working nicely now
flippingout said:
This. I have used Smart Lock on my N5 with no problems even though we are required to have a PIN. Fired up the G4 and immediately noticed once I setup email Smart Lock was grey and can't be used. I thought that by switching to Gmail for my Exchange email I could get around that only to find Gmail doesn't have Exchange support on this phone (until I found this thread).
Has anyone that has followed the instructions at the top been able to get Smart Lock working when Gmail is used for Exchange email? Or does Touchdown get around this?
I am going to test this out tonight - can't goof around too much while on the job!!
Click to expand...
Click to collapse
Have you been able to figure this out? I have coworkers on a N6, N5, and a HTC One (M7), who all have our Corporate E-mail linked to their phone via either gmail or the htc e-mail app. They can all access their respective Smart Lock settings. On my phone, its grayed out.
Confused on what this does? Just lets you add a second exchange account to gmail? Are emails mixed together or do they remain separated? I like having my Email and Gmail in 2 different apps. I also like the LG email app.
Hi all,
I am still waiting for my Nexus to arrive and will need AirWatch connect to my employer's Exchange. Does Marshmallow or Huawei have an official agent to allow native email client use without bloody TouchDown?
Thanks.
My company also uses AirWatch. Like the Nexus 6, there is not a native email client outside of adding POP/IMAP/Exchange accounts in Gmail.
I am forced to used the Inbox by AirWatch app which is pretty terrible. Also, when your IT department sets up your phone it requires special permissions on their end to use the app. Make sure you request them.
On the plus side, AirWatch has no problems using the fingerprint scanned as a secure method to unlock your phone.
Happy to help if you have any other questions.
Yeah, just tested everything and need to use Touchdown.
Gesendet von meinem Nexus 6P mit Tapatalk
chortya said:
Yeah, just tested everything and need to use Touchdown.
Gesendet von meinem Nexus 6P mit Tapatalk
Click to expand...
Click to collapse
We are apparently going to Airwatch next month... The airwatch client gets terrible reviews and while Touchdown isn't ideal, I've used it before and I can live with it. Did you have to do anything special to get Touchdown to work with Airwatch?
No, we have an automated policy which downloads and configures Touchdown for us. No issues. I just wish Touchdown would integrate into the native calender... The rest is ok.
Gesendet von meinem Nexus 6P mit Tapatalk
I use 9 for exchange/company email.
ycats said:
I use 9 for exchange/company email.
Click to expand...
Click to collapse
So 9 email works with Airwatch? I am using it my exchange email now, but we are implementing Airwatch next month. I would definitely like to keep using 9 if possible.
chortya said:
No, we have an automated policy which downloads and configures Touchdown for us. No issues. I just wish Touchdown would integrate into the native calender... The rest is ok.
Click to expand...
Click to collapse
Same here. Your enterprise should have it set up so that TD more or less configures automatically once you've enrolled the device through AirWatch.
Now, my big question is whether it will continue to work if I'm rooted. I never had a problem in the past, but recently when I upgraded my old rooted Nexus 5 to Android 6.0 and then re-rooted it, I lost the ability to enroll with AirWatch. I'm not sure what happened but I know Airwatch doesn't want your phone to be rooted.
chortya said:
Hi all,
I am still waiting for my Nexus to arrive and will need AirWatch connect to my employer's Exchange. Does Marshmallow or Huawei have an official agent to allow native email client use without bloody TouchDown?
Thanks.
Click to expand...
Click to collapse
Were you able to connect your 6P to Exchange?
Not directly, only with TouchDown.
Gesendet von meinem Pixel C mit Tapatalk
Mark7A said:
Were you able to connect your 6P to Exchange?
Click to expand...
Click to collapse
Give Nine Mail a try...much better than touchdown IMO and works with AirWatch. You will need to manually configure the settings (mostly the server address) but its pretty simple.
I tried it before but our corporate policy did not allow the connection. I assume based on the user agent ir similar identification of the mail client.
Gesendet von meinem Nexus 6P mit Tapatalk
We are going airwatch too but huge let down is no root devices allowed to enroll. I always thought rooted devices can be or are more secure. Any ideas round this
bkayy said:
We are going airwatch too but huge let down is no root devices allowed to enroll. I always thought rooted devices can be or are more secure. Any ideas round this
Click to expand...
Click to collapse
Only way I found was to use Xposed and the Unwatch module ...also it failed until I went with systemless root. Using Nine Mail and it is flawless.
Root cloak did not work and I am going to try to never update the Airwatch app as who knows if it will keep working.
tfly212 said:
Only way I found was to use Xposed and the Unwatch module ...also it failed until I went with systemless root. Using Nine Mail and it is flawless.
Root cloak did not work and I am going to try to never update the Airwatch app as who knows if it will keep working.
Click to expand...
Click to collapse
I have the most recent version of Airwatch and Unwatch Xposed module and I can get passed the root check. My company specifically blocks Nine from working though.
The Nexus 6p has an Exchange email setup built in. See the link below:
http://support.sprint.com/support/t.../WScenario_542_62075_771_en_118-dvc9700001prd
My company also blocks that
So if neither of those work for you, you may be stuck with Touchdown as well.
Update: Aquamail and Boomerang work for me. I'm using Aquamail since it seems to work with Google calendar.
tfly212 said:
Give Nine Mail a try...much better than touchdown IMO and works with AirWatch. You will need to manually configure the settings (mostly the server address) but its pretty simple.
Click to expand...
Click to collapse
Hi there.
Sorry, could you please clarify how you made Nine work with Airwatch?
My company just enforced Airwatch this month so my Nine client stopped syncing... what would I need to do? The server address I was previously using doesn't seem to be working anymore.
I'm desperate to know this since the "Airwatch Inbox" app is utter crap.
Also, is there any way to get the calendar synced with other app than this "Airwatch Calendar" bull****? I really want to have a homescreen widget showing my upcoming meetings, but I can no longer do that since 3rd party apps can't access my work calendar anymore.
Any help would be really appreciated.
VictorML said:
Hi there.
Sorry, could you please clarify how you made Nine work with Airwatch?
My company just enforced Airwatch this month so my Nine client stopped syncing... what would I need to do? The server address I was previously using doesn't seem to be working anymore.
I'm desperate to know this since the "Airwatch Inbox" app is utter crap.
Also, is there any way to get the calendar synced with other app than this "Airwatch Calendar" bull****? I really want to have a homescreen widget showing my upcoming meetings, but I can no longer do that since 3rd party apps can't access my work calendar anymore.
Any help would be really appreciated.
Click to expand...
Click to collapse
First I used systemless root ...but not a ROM with systemless root included, that failed. Flashed to stock and then systemless rooted. Installed Xposed and then UnWatch. Then Nine, then Airwatch.
My Nine settings are attached below. You want to use your official outlook name email for the domain/user and then insert your company email alias after the awmdm in the server line.
For the calendar I didn't have to do anything other than choose to sync calendar in Nine. Then I added the pure calendar widget and have a scrolling view of all outlook and Google appointments.
I was petrified of flashing the update to the March security update...but it worked. I have not, and will not update airwatch until something breaks.
Hope this helps. If I can answer anything else, Lmk.
tfly212 said:
First I used systemless root ...but not a ROM with systemless root included, that failed. Flashed to stock and then systemless rooted. Installed Xposed and then UnWatch. Then Nine, then Airwatch.
My Nine settings are attached below. You want to use your official outlook name email for the domain/user and then insert your company email alias after the awmdm in the server line.
For the calendar I didn't have to do anything other than choose to sync calendar in Nine. Then I added the pure calendar widget and have a scrolling view of all outlook and Google appointments.
I was petrified of flashing the update to the March security update...but it worked. I have not, and will not update airwatch until something breaks.
Hope this helps. If I can answer anything else, Lmk.
Click to expand...
Click to collapse
Question: the whole flashing and unflashing of everything was just to be able to use root, right?
I'm OK with not having root for now - all I really want is to use Nine instead of this crappy Airwatch Inbox app.
I've checked said Airwatch Inbox app, and the server settings are the same as they were before. So not vmdm.XXXXX.com like in your screenshot, but the same email server we were using before. However that fails in Nine now.
I've also checked the enrollment status in the "Airwatch Agent" app, and ironically it does show vmdm.XXXXX.com in there as the server.
Sounds to me like your company didn't really restrict the use of third party apps maybe?
VictorML said:
Question: the whole flashing and unflashing of everything was just to be able to use root, right?
I'm OK with not having root for now - all I really want is to use Nine instead of this crappy Airwatch Inbox app.
I've checked said Airwatch Inbox app, and the server settings are the same as they were before. So not vmdm.XXXXX.com like in your screenshot, but the same email server we were using before. However that fails in Nine now.
I've also checked the enrollment status in the "Airwatch Agent" app, and ironically it does show vmdm.XXXXX.com in there as the server.
Sounds to me like your company didn't really restrict the use of third party apps maybe?
Click to expand...
Click to collapse
Good question... I'm not sure how restrictive they are...most of our firm uses IPhones so I was lone wolfing a lot of this. I emailed the developer of Nine and they said it should work without any issues. I also never installed the inbox app...only the airwatch app and just plugged the settings into Nine.
In all honestly though, I don't think I tried nine without being rooted and using the UnWatch xposed module...that may be a requirement. I knew I wanted root so I may have only gone that route.
tfly212 said:
Good question... I'm not sure how restrictive they are...most of our firm uses IPhones so I was lone wolfing a lot of this. I emailed the developer of Nine and they said it should work without any issues. I also never installed the inbox app...only the airwatch app and just plugged the settings into Nine.
In all honestly though, I don't think I tried nine without being rooted and using the UnWatch xposed module...that may be a requirement. I knew I wanted root so I may have only gone that route.
Click to expand...
Click to collapse
Yeah I also emailed Nine devs. They told me that IF our AirWatch solution is "based" on Android for Work, I could just install this: https://play.google.com/store/apps/details?id=com.ninefolders.hd3.work, and it should work.
But I don't even know how to check if they're using Android for Work.
That app just tells me that a configuration file is needed, and I can't enter any login details on it.
I'll keep talking to the devs and I'll try to speak to someone in our IT department as well... ahh the perks of working for a huge multinational company. The person in charge of this probably lives somewhere with an 8 hour time difference with me, and a salary of $3 per hour.
Sigh.
Hi all,
I want to buy S8, but my only worry is that the app I'm using to bypass exchange policy will not work. (App name "Exchange Security Bypass" from Xposed Module Repository)
I tried it on S7 and it didn't work. so at the moment I'm still with my S5.
Anyone tried it by any chance on S8?
or any other app that can help me bypass the Exchange security? (our company forces encryption & being device admin on our devices which to both I say - NO).
Would like to mention that my device is not rooted and I'd prefer to not root the S8. the app above works like a charm on an S5 without root.
Thanks,
Poly
I've used nine email to bypass exchange policy, might be worth trying that.
I'm a Nine user
adz3d said:
I've used nine email to bypass exchange policy, might be worth trying that.
Click to expand...
Click to collapse
But since the policy comes from Exchange all I got was one mail in the Nine app saying that only once I finish encrypting & adding the company as device administrators the mail will work again.
Once I installed the app of Exchange bypass on the S5 - it started working again.
Do you know if Nine added a security baypass as a new thing and potentially I don't need the bypass anymore?
thanks,
Poly
Nine allow you to apply security at the application level. Since S8 is encrypted by default, unless your company push a lot more weird policy like blocking camera and such, it shouldn't be that bad anymore.
The "Exchained" app doesn't need rooting and works with Nine too.