Database Users

Exchange email security.

I tried to set up an account to my Exchange email at work using the default email app on my TF101. When I set up an account it requires that I enable all of these security settings on the tab like having a PIN and encrypting data. I don't want to do all of that. I realize that this is something set up by my Exchange administrator but I am not sure they even did it knowingly and anyway I don't want to have to deal with it to check email.
Does anyone know how to bypass this? Searches of these forums and the web show that there are some modded email apks for other platforms that let you bypass the security settings. I have not seen any such mods for ICS on the TF101.
Thanks in advance for your help.

Hello,
I do not believe the stock email is able to handle the security settings from an exchange server. You need to look at other programs like Moxier Mail or TouchDown.

+1 for touch down. Works great but it is $20

Enhanced email is another option. I got it from free app of the day by Amazon. At first, it did not work on android 3.0+, but it works fine now. It gives you the option to ignore security policies.
Alternatively, if you decompile the email.apk, I believe you can force a variable so that the email app always tells the exchange server you have sufficient security enabled (I'm not exactly sure where must be changed).

tonyz3 said:
+1 for touch down. Works great but it is $20
Click to expand...
Click to collapse
I couldn't agree more. Do the trial first to see if you like it. I don't recommend bypassing the security. You can unknowingly pass a virus through your corporate exchange. Hopefully, one day, they will resolve this issue in the Android exchange client.

tonyz3 said:
+1 for touch down. Works great but it is $20
Click to expand...
Click to collapse
+1... Touchdown. Forget any other Exchange apps.

+1 for Enhanced Email - optionally bypasses the admin security settings - works fine on Honeycomb and ICS too.

Exchange Admin
Hello,
When setting up exchange servers in the past, the default exchange policy is to have those features enabled. Even if those are DISABLED, the tablet will still ask to create the partnership. I believe this is so it can be wiped remotely. It seems ICS just tells you it is going to do all of those things as a generic warning. I have noticed this is only on ICS though. If you click ok, it shouldn't ask you to create a PIN or anything if it isn't actually required. We currently only have exchange 2010 in production in a test environment, so I have yet to look for the setting to disable this feature entirely. Hope this helps you understand how it works at least a little.

[HOW-TO] Bypass Exchange Security for NINE email

All,
The "Nine" exchange email app available on the play store gives you the option of Device Exchange Security protocol via device administrator OR Software level Exchange Security protocol. In other words, to receive exchange email you can either be forced to screen lock your phone or password protect the nine app to receive your exchange mail.
I have figured out how to remove the software level exchange security protocol if anyone is interested.
Here is the very quick how to.
**Prerequisite**
You must be rooted.
1. Download app
2. Install app and setup your exchange email. Use app level exchange security NOT device level.
3. Set your password. We will remove this policy later
4. Make sure your email starts to flow in
5. Download your favorite SQL database editor. I use SQLlite
6. Open database editor and go to the nine app
7. Open email provider db then account.... change policy key from 2 to 0 then save.
8. Leave account then go to policy. You are still inside email provider db.
9. Change the password mode from 2 to 0. This is the first setting at the top of the list. Scroll down to protocol policy required... Set this to 0. Then scroll all the way down to the bottom to the last policy item called alphanumeric password required... Change this from 2 to 0. Then hit save.
10. Now, back out of the SQL editor... Don't open nine email yet.
11. Force close nine email. You must force close instead of removing from recent
12. Start nine email. Go to security and enter your password once if it asks. May not even ask. Then Uncheck "password".
13. Reboot, profit. At this point the exchange policy should now be bypassed.
If this helped you by me a beer!!! See donate button by my name.
Follow me on Twitter for more awesome tweaks. @bash_array

Screenshot

Hi, tried this but I can't locate that database. I must be doing some thing wrong. I'm using a Oneplus One but I don't see the email provider db. Can you post a screen shot of what it should look like after I select Nine from the app list in SQLite? Also, there are multiple SQLite apps, which one are you using?

Here is the app I use....
https://play.google.com/store/apps/details?id=com.speedsoftware.sqleditor

Here is a screenshot. Note, the databases won't be created until you fully setup your email in nine and begin receiving emails. Once you do that it'll look like this.....

bash_array said:
Here is a screenshot. Note, the databases won't be created until you fully setup your email in nine and begin receiving emails. Once you do that it'll look like this.....
Click to expand...
Click to collapse
Not sure what I'm doing wrong. I have Nine setup with my work account and it's working but when I follow your steps I don't see the databases?
I'm on the One plus one if that matters.

hamzer11 said:
Not sure what I'm doing wrong. I have Nine setup with my work account and it's working but when I follow your steps I don't see the databases?
I'm on the One plus one if that matters.
Click to expand...
Click to collapse
Are you rooted? My apologies. I forgot to mention that you must be rooted in order to see secured databases

bash_array said:
Are you rooted? My apologies. I forgot to mention that you must be rooted in order to see secured databases
Click to expand...
Click to collapse
Yes I am. It asked and was granted permissions. You can see the # symbol in the status bar while SQLite is running. I will check again.
edit: Checked again and it has root. My Nine version is 1.8.0d (108004) Licensed. Not sure that matters.

I have the licensed app too. What OS are you running? Cm12?

bash_array said:
I have the licensed app too. What OS are you running? Cm12?
Click to expand...
Click to collapse
Yes. I will try removing the account and adding it again. I checked other apps and they all seem to have their databases.

Tried deleting account and reinstalling app. No luck. When I add my work account it forces me to accept encryption, does that have anything to do with it? I really would love this to work but I don't know what else to do.

hamzer11 said:
Tried deleting account and reinstalling app. No luck. When I add my work account it forces me to accept encryption, does that have anything to do with it? I really would love this to work but I don't know what else to do.
Click to expand...
Click to collapse
You want to set everything up including allowing the app to force you to create a password. Don't use device level security. Use app level security within nine. Once your password is set and you have begun receiving emails then the email provider db will be created. After you have set a password and get your emails up and running then go into sqlite and follow the edit instructions

bash_array said:
You want to set everything up including allowing the app to force you to create a password. Don't use device level security. Use app level security within nine. Once your password is set and you have begun receiving emails then the email provider db will be created. After you have set a password and get your emails up and running then go into sqlite and follow the edit instructions
Click to expand...
Click to collapse
I tried everything you said. I am convinced that the DB is being hidden somehow (encrypted maybe). I tried another app, aSQLiteManager. Navigated to the Nine app folder in data/data. Then went into the databases folder. Here I see the following databases:
LogReporter.db
SecureEMailProvider.db
SecureEmailProviderBackuip.db
SecureEmailProviderBody.db
I noticed all have the work "secure" before it except LogReporter. For some reason SQLite app can only see the ones not listed as secure. So I thought I was good to go but when I click on SecureEmailProvider.db I get the message "/storage/emulated/0/aSQLiteManager/SecureEmailProvider.db is not a database"
No idea where to go from here. Appreciate your help but I guess it just won't work for me. It would be nice if someone else was also trying. I should note again that I can see and open databases for other apps just fine.

bash_array said:
All,
The "Nine" exchange email app available on the play store gives you the option of Device Exchange Security protocol via device administrator OR Software level Exchange Security protocol. In other words, to receive exchange email you can either be forced to screen lock your phone or password protect the nine app to receive your exchange mail.
I have figured out how to remove the software level exchange security protocol if anyone is interested.
. @bash_array
Click to expand...
Click to collapse
Any idea if this still works on version 1.8.19? If not, do you know of any other options?

clambert11 said:
Any idea if this still works on version 1.8.19? If not, do you know of any other options?
Click to expand...
Click to collapse
I can confirm this on 1.8.19a

It worked!!!! You are amazing.. Thanks a lot.
---------- Post added at 11:34 PM ---------- Previous post was at 11:33 PM ----------
Worked in latest version that I downloaded from google play today.. 1.8.21

Thanks, worked great for me on both my phone and on my tablet.

hamzer11 said:
I tried everything you said. I am convinced that the DB is being hidden somehow (encrypted maybe). I tried another app, aSQLiteManager. Navigated to the Nine app folder in data/data. Then went into the databases folder. Here I see the following databases:
LogReporter.db
SecureEMailProvider.db
SecureEmailProviderBackuip.db
SecureEmailProviderBody.db
I noticed all have the work "secure" before it except LogReporter. For some reason SQLite app can only see the ones not listed as secure. So I thought I was good to go but when I click on SecureEmailProvider.db I get the message "/storage/emulated/0/aSQLiteManager/SecureEmailProvider.db is not a database"
No idea where to go from here. Appreciate your help but I guess it just won't work for me. It would be nice if someone else was also trying. I should note again that I can see and open databases for other apps just fine.
Click to expand...
Click to collapse
Were you able to fix this issue? I have same problem and not able to figure out how to disable this.

bash_array said:
All,
The "Nine" exchange email app available on the play store gives you the option of Device Exchange Security protocol via device administrator OR Software level Exchange Security protocol. In other words, to receive exchange email you can either be forced to screen lock your phone or password protect the nine app to receive your exchange mail.
I have figured out how to remove the software level exchange security protocol if anyone is interested.
Here is the very quick how to.
**Prerequisite**
You must be rooted.
1. Download app
2. Install app and setup your exchange email. Use app level exchange security NOT device level.
3. Set your password. We will remove this policy later
4. Make sure your email starts to flow in
5. Download your favorite SQL database editor. I use SQLlite
6. Open database editor and go to the nine app
7. Open email provider db then account.... change policy key from 2 to 0 then save.
8. Leave account then go to policy. You are still inside email provider db.
9. Change the password mode from 2 to 0. This is the first setting at the top of the list. Scroll down to protocol policy required... Set this to 0. Then scroll all the way down to the bottom to the last policy item called alphanumeric password required... Change this from 2 to 0. Then hit save.
10. Now, back out of the SQL editor... Don't open nine email yet.
11. Force close nine email. You must force close instead of removing from recent
12. Start nine email. Go to security and enter your password once if it asks. May not even ask. Then Uncheck "password".
13. Reboot, profit. At this point the exchange policy should now be bypassed.
If this helped you by me a beer!!! See donate button by my name.
Follow me on Twitter for more awesome tweaks. @bash_array
Click to expand...
Click to collapse
Please excuse this shameless hijack but it is somewhat on topic.
My company uses Outlook Web Access through Office 365 and previously I was able to use NINE to access my email. I was even able to execute this bypass hack. Recently however my company's server stopped allowing access to NINE. I thought it might be because of the bypass hack so I factory reset the phone and tried to do a fresh install and setup and it doesn't work. I tried several OWA apps and the only that works is MobiMail.
Any idea why NINE doesn't work anymore?

HTC-OH_SNAP said:
Please excuse this shameless hijack but it is somewhat on topic.
My company uses Outlook Web Access through Office 365 and previously I was able to use NINE to access my email. I was even able to execute this bypass hack. Recently however my company's server stopped allowing access to NINE. I thought it might be because of the bypass hack so I factory reset the phone and tried to do a fresh install and setup and it doesn't work. I tried several OWA apps and the only that works is MobiMail.
Any idea why NINE doesn't work anymore?
Click to expand...
Click to collapse
NINE does not use OWA, it uses active sync. MobiMail connects via OWA, so very much like a web browser. I would first ask a few co workers if their active sync app still works. If theirs does not work your IT Department broke activesync or turned it off on everyone.
If theirs works the IT Department turned it off on just your mailbox.

TIP: Adding Exchange/Hotmail support to GMail

If anyone is interested, the Exchange service on the G4 (at least the T-Mobile version) can be disabled via the apps menu and Google Exchange services can be installed.
This will allow you to use the GMail app with Exchange enabled hosts, like Hotmail/Outlook.com and retain push mail, contact and calendar sync.
Recommended steps:
If you have any accounts using email and exchange, remove them first.
Open Settings/General/Apps/All
Tap on Exchange (The LG one with the blue icon)
Force stop
Disable the Exchange Service
(Restarting your phone is recommended at this point)
Install Google Exchange Services
(Restarting your phone is recommended at this point as well)
Open GMail and you will have Exchange as an option when you add an account.

This is gold to me.
Thanks.

sweet thx!
edit: oops that didn't work for me it gets stuck constantly sync'ing and has some exchange service crashes hmm...

Works fine here so far. I just wish you could disable the remote administration requiring your device to use a PIN. I'd love to use Smart Lock.

jbdan said:
sweet thx!
edit: oops that didn't work for me it gets stuck constantly sync'ing and has some exchange service crashes hmm...
Click to expand...
Click to collapse
It's important that you remove any old exchange accounts in email first, then force close the LG exchange service and disable it. If you don't disable it, then GMail will get stuck syncing.

Joe USer said:
It's important that you remove any old exchange accounts in email first, then force close the LG exchange service and disable it. If you don't disable it, then GMail will get stuck syncing.
Click to expand...
Click to collapse
Thanks I did that I'll try it again.

jbdan said:
Thanks I did that I'll try it again.
Click to expand...
Click to collapse
Did you ever get it to work? If not, which model of the phone do you have?

Directions worked perfectly. Thank you.

Joe USer said:
Did you ever get it to work? If not, which model of the phone do you have?
Click to expand...
Click to collapse
I haven't tried it again yet my life is crazy with a 3 yr old and twins I've been using stock g4 email app. I'll try it this week and report back thanks. Tmo version

geoff5093 said:
Works fine here so far. I just wish you could disable the remote administration requiring your device to use a PIN. I'd love to use Smart Lock.
Click to expand...
Click to collapse
Just waiting on root so I can keep my damn unlock screen without having to put in an 8 character password with numbers and special characters every time I want to unlock my phone.
I might just bite the bullet and buy touchdown for $20 because I heard it doesn't need to apply the permissions to your whole phone but just the app.

geoff5093 said:
Works fine here so far. I just wish you could disable the remote administration requiring your device to use a PIN. I'd love to use Smart Lock.
Click to expand...
Click to collapse
centran said:
Just waiting on root so I can keep my damn unlock screen without having to put in an 8 character password with numbers and special characters every time I want to unlock my phone.
I might just bite the bullet and buy touchdown for $20 because I heard it doesn't need to apply the permissions to your whole phone but just the app.
Click to expand...
Click to collapse
This. I have used Smart Lock on my N5 with no problems even though we are required to have a PIN. Fired up the G4 and immediately noticed once I setup email Smart Lock was grey and can't be used. I thought that by switching to Gmail for my Exchange email I could get around that only to find Gmail doesn't have Exchange support on this phone (until I found this thread).
Has anyone that has followed the instructions at the top been able to get Smart Lock working when Gmail is used for Exchange email? Or does Touchdown get around this?
I am going to test this out tonight - can't goof around too much while on the job!!

centran said:
Just waiting on root so I can keep my damn unlock screen without having to put in an 8 character password with numbers and special characters every time I want to unlock my phone.
I might just bite the bullet and buy touchdown for $20 because I heard it doesn't need to apply the permissions to your whole phone but just the app.
Click to expand...
Click to collapse
Does that also sync your calendar and contacts?
flippingout said:
This. I have used Smart Lock on my N5 with no problems even though we are required to have a PIN. Fired up the G4 and immediately noticed once I setup email Smart Lock was grey and can't be used. I thought that by switching to Gmail for my Exchange email I could get around that only to find Gmail doesn't have Exchange support on this phone (until I found this thread).
Has anyone that has followed the instructions at the top been able to get Smart Lock working when Gmail is used for Exchange email? Or does Touchdown get around this?
I am going to test this out tonight - can't goof around too much while on the job!!
Click to expand...
Click to collapse
Outlook bypasses the security requirement, but it appears to only sync email, not calendars or contacts. You get prompted that Exchange wants you to accept these changes, but you have an option to deny them.

geoff5093 said:
Does that also sync your calendar and contacts?
Outlook bypasses the security requirement, but it appears to only sync email, not calendars or contacts. You get prompted that Exchange wants you to accept these changes, but you have an option to deny them.
Click to expand...
Click to collapse
I'll have to look at that new outlook app closer then. It prompted me for the security permissions to wipe phone, pin, and all that crap so I exited out.
Touchdown is supposed to be all one contained environment so I don't think it syncs with the default apps. I could be wrong as I have never tried it since I always got a PIN bypasser working on my old phones. It is free for a month so try it out! I don't care about contacts and it would be nice to have calendar but I'm not heartbroken over it. What I would like to know is if you still get a notification of new mail. I would assume so but aren't allowed to preview it which is fine but I at least need to know I have mail.

centran said:
I'll have to look at that new outlook app closer then. It prompted me for the security permissions to wipe phone, pin, and all that crap so I exited out.
Touchdown is supposed to be all one contained environment so I don't think it syncs with the default apps. I could be wrong as I have never tried it since I always got a PIN bypasser working on my old phones. It is free for a month so try it out! I don't care about contacts and it would be nice to have calendar but I'm not heartbroken over it. What I would like to know is if you still get a notification of new mail. I would assume so but aren't allowed to preview it which is fine but I at least need to know I have mail.
Click to expand...
Click to collapse
Yeah that request seems to be standard whenever you setup Outlook, regardless of app. It was when it came to the lock screen settings, it allowed me to dismiss it.

I just tried the Outlook app and it required far less permissions then adding an exchange email through the android/lg settings. The regular settings wanted pretty much everything. Wipe, disable camera, password type, password length, password expiration, encrypt phone, disable sd card, etc etc. It had everything and probably because my company just checked everything. Now the question is if it would really do any of those things probably not because that it a further settings in Exchange but it just wants to be able to do all that.
The Outlook just wanted password rules, unlock attempts, lock screen, and encrypt phone. It asked to encrypt and I said no and phone still works. I was able to keep pattern lock screen but it disabled everything else besides pin and password. The Outlook app does not integrate well with Android so everything is contained in it's own app. I don't think it does notifications either since I sent an email and waited a good 10 minutes. My phone never went off but I open the app the email shows up but never as a notification.
So maybe the Outlook app will get you by for the time being.

Hrm - I'm on an LG G4 (EU H815 model, unlocked). No Google Exchange Services visible or available in the Play Store ...
I also have an old Galaxy S3 running 5.1.1 (PacMan rom) - that has Gmail with Exchange working just fine. It has the same version of Gmail as on the G4, but also has "Exchange Services" running. I can't find any other information on that though.
[EDIT] I just checked the link in the OP which looks like the latest apk, but the button for Play Store doesn't work - URL doesn't exist.
Quick question - I haven't disabled LG Exchange on the G4 yet - when I do it says that the app will be hidden from then on. What if one wants to re-enable it - will it still be visible on the Apps menu ?
TIA
D -

Halfwalker said:
Hrm - I'm on an LG G4 (EU H815 model, unlocked). No Google Exchange Services visible or available in the Play Store ...
I also have an old Galaxy S3 running 5.1.1 (PacMan rom) - that has Gmail with Exchange working just fine. It has the same version of Gmail as on the G4, but also has "Exchange Services" running. I can't find any other information on that though.
[EDIT] I just checked the link in the OP which looks like the latest apk, but the button for Play Store doesn't work - URL doesn't exist.
Quick question - I haven't disabled LG Exchange on the G4 yet - when I do it says that the app will be hidden from then on. What if one wants to re-enable it - will it still be visible on the Apps menu ?
TIA
D -
Click to expand...
Click to collapse
Yes, just go to your apps in settings and it will be under 'disabled'.

Just switched things over, and Gmail Exchange is working nicely now

flippingout said:
This. I have used Smart Lock on my N5 with no problems even though we are required to have a PIN. Fired up the G4 and immediately noticed once I setup email Smart Lock was grey and can't be used. I thought that by switching to Gmail for my Exchange email I could get around that only to find Gmail doesn't have Exchange support on this phone (until I found this thread).
Has anyone that has followed the instructions at the top been able to get Smart Lock working when Gmail is used for Exchange email? Or does Touchdown get around this?
I am going to test this out tonight - can't goof around too much while on the job!!
Click to expand...
Click to collapse
Have you been able to figure this out? I have coworkers on a N6, N5, and a HTC One (M7), who all have our Corporate E-mail linked to their phone via either gmail or the htc e-mail app. They can all access their respective Smart Lock settings. On my phone, its grayed out.

Confused on what this does? Just lets you add a second exchange account to gmail? Are emails mixed together or do they remain separated? I like having my Email and Gmail in 2 different apps. I also like the LG email app.

Exchange server screenlock problem (not the standard)

Hi all,
I have a problem with my new Nexus 6P and the exchange server in combination with my screenlock.
Whenever i set up the exchange mail account, i have to set up a pin or password to unlock my phone. When i want to change back the pin / password to a pattern, i cant and it says: "disabled by administrator encryption policy or credential storage"
Normally the reply on this post would be, your company has set up these minimum requirements for security purposes and you cant put up the mail/agenda unless you accept the terms of the company.
The weird thing is, my company doesn't`t require any security measures at all. If you want to swipe to unlock, you can (well, other people can ).
Does anyone have a solution for this problem?
If you need more background / tell info, let me know!
Thanks in advance,
Arjan

anyone?

Exchange must be requiring that or it wouldn't force it on you.
You could always use a 3rd party exchange mail client if it bothers you about it restricting your lock options. I use touchdown (contains exchange in one sandbox) my phone is still mine if the admins wipe the phone it just wipes touchdown.
Don't have to use touchdown but it's just an example.

Normally you would say that exchange forces the security, but i went by the IT-department and they have shown me that all restrictions are off.
A third party app is a possibility, but i'd rather use the app i have to combine multiple email-accounts and agenda's.

I still haven't found a solution for the problem. I really don't get why my phone restricts my screenlock options, when the IT-department has deleted all restrictions.

Lock Screen -- how to turn off on Amazon device?

I want to turn off the lock screen, not even swipe, but there is no "none" option in Security settings. Originally, my phone was an Amazon ads phone, but I paid the $50 to get rid of ads (spent hours trying to remove using debloater tool from this website but hit brick wall). I thought maybe that was what was preventing the "none" lock screen option, but I still don't see it. I have Android 6.0.1.
Any suggestions? Does anyone who has an Amazon phone (with or without ads) see the "none" option in Security settings for lock screen? (with Android 6.0.1+)
Thanks!

I believe the issue you are experiencing is related to the presence of a guest account. On older versions of the g if there was a guest account the none option for the screenlock disappeared. I just tried to disable the guest account on my prime g4, but don't see a way to actually remove the account.

I can't seem to figure out how to remove/disable the guest user account...

TylerSz said:
I can't seem to figure out how to remove/disable the guest user account...
Click to expand...
Click to collapse
Unless you're rooted I don't believe you can remove it.