Database Users

Exchange email security.

I tried to set up an account to my Exchange email at work using the default email app on my TF101. When I set up an account it requires that I enable all of these security settings on the tab like having a PIN and encrypting data. I don't want to do all of that. I realize that this is something set up by my Exchange administrator but I am not sure they even did it knowingly and anyway I don't want to have to deal with it to check email.
Does anyone know how to bypass this? Searches of these forums and the web show that there are some modded email apks for other platforms that let you bypass the security settings. I have not seen any such mods for ICS on the TF101.
Thanks in advance for your help.

Hello,
I do not believe the stock email is able to handle the security settings from an exchange server. You need to look at other programs like Moxier Mail or TouchDown.

+1 for touch down. Works great but it is $20

Enhanced email is another option. I got it from free app of the day by Amazon. At first, it did not work on android 3.0+, but it works fine now. It gives you the option to ignore security policies.
Alternatively, if you decompile the email.apk, I believe you can force a variable so that the email app always tells the exchange server you have sufficient security enabled (I'm not exactly sure where must be changed).

tonyz3 said:
+1 for touch down. Works great but it is $20
Click to expand...
Click to collapse
I couldn't agree more. Do the trial first to see if you like it. I don't recommend bypassing the security. You can unknowingly pass a virus through your corporate exchange. Hopefully, one day, they will resolve this issue in the Android exchange client.

tonyz3 said:
+1 for touch down. Works great but it is $20
Click to expand...
Click to collapse
+1... Touchdown. Forget any other Exchange apps.

+1 for Enhanced Email - optionally bypasses the admin security settings - works fine on Honeycomb and ICS too.

Exchange Admin
Hello,
When setting up exchange servers in the past, the default exchange policy is to have those features enabled. Even if those are DISABLED, the tablet will still ask to create the partnership. I believe this is so it can be wiped remotely. It seems ICS just tells you it is going to do all of those things as a generic warning. I have noticed this is only on ICS though. If you click ok, it shouldn't ask you to create a PIN or anything if it isn't actually required. We currently only have exchange 2010 in production in a test environment, so I have yet to look for the setting to disable this feature entirely. Hope this helps you understand how it works at least a little.

Bypass Exchange Security?

Anyone figured out how to bypass Exchange security on the G2?
Thanks!

Soundchasr said:
Anyone figured out how to bypass Exchange security on the G2?
Thanks!
Click to expand...
Click to collapse
Would like to know this too. In the meantime search for an xposed mod. Notification mod. This one allows you to use the notification pulldown.
Helps a lot.
Sent from my LG-D802 using Tapatalk

Anyone? Please?

Soundchasr said:
Anyone figured out how to bypass Exchange security on the G2?
Thanks!
Click to expand...
Click to collapse
Did you try new Google KitKat email app? Make sure that you install both Email and Exchange 2 email apk.
http://androidcommunity.com/nexus-5...s-android-4-4-google-apps-downloads-20131101/

the easy answer is to use enhanced email, can be found in Google Play. I am using that myself

alex72 said:
Did you try new Google KitKat email app? Make sure that you install both Email and Exchange 2 email apk.
http://androidcommunity.com/nexus-5...s-android-4-4-google-apps-downloads-20131101/
Click to expand...
Click to collapse
I think the OP like me wants to bypass the security set by the rules, not the app itself.
henrylar said:
the easy answer is to use enhanced email, can be found in Google Play. I am using that myself
Click to expand...
Click to collapse
Best most money on an app spent!.... NOT...DOESN'T WORK IN MY CASE...
And you know 15 minutes are not enough to even try it due to the options and testing and hoping. Bought it long ago. In my case it didn't work...
Company has its own app. And another 2 apps checking if the app is admin etc.
Only thing that could be done is either to input the pass automatically when I unlock the phone. Maybe something via xposed. And add a second screen unlock option.
Somewhat like the iPhone jailbreak has it...loved the security bypass plus android pattern unlock....
Sent from my LG-D802 using Tapatalk

Can someone try this? Saw it in company forums. But might be completely unrelated https://play.google.com/store/apps/details?id=ru.chunky.AutoKeystore&hl=en

I use touchdown so the policy is applied to the app and not the device.
Sent from my LG-D803 using XDA Premium 4 mobile app

PAGOT said:
I think the OP like me wants to bypass the security set by the rules, not the app itself.
Best most money on an app spent!.... NOT...DOESN'T WORK IN MY CASE...
And you know 15 minutes are not enough to even try it due to the options and testing and hoping. Bought it long ago. In my case it didn't work...
Company has its own app. And another 2 apps checking if the app is admin etc.
Only thing that could be done is either to input the pass automatically when I unlock the phone. Maybe something via xposed. And add a second screen unlock option.
Somewhat like the iPhone jailbreak has it...loved the security bypass plus android pattern unlock....
Sent from my LG-D802 using Tapatalk
Click to expand...
Click to collapse
It depends obviously then on how the exchange server is configured. In my case e-email bypasses the security demands from the exchange server completely. When I had my HTC sensation, I used a mod you can find in the HTC sensation development, search for exchange - there is also something about using it with other phones.

see this post for files/kudos: http://forum.xda-developers.com/showpost.php?p=47063058&postcount=406
however, you don't need to push via ADB or anything:
1) uninstall your current email and exchange apks (via titanium backup or something similar)
2) either wipe dalvik cache or delete the associated email and exchange odex files in /data/dalvik-cache
3) install the 2 APKs (i usually install exchange first, then email)
4) setup your email
been working perfectly for me for the past week.
EDIT: this is the new 4.4 email/exchange, btw, with the gmail-style interface. it's fantastic.

I would really like to find a way to dodge the lockscreen and other policies that are enforced by Exchange. I don't want to use the KK email.

I use an app called Keystore Unlocker from the play store...must be rooted. You can skip the step adding a VPN and it will still work.
Sent from my VS980 4G using xda app-developers app

tlbland0426 said:
I use an app called Keystore Unlocker from the play store...must be rooted. You can skip the step adding a VPN and it will still work.
Sent from my VS980 4G using xda app-developers app
Click to expand...
Click to collapse
Can you explain the process? I've got the app and have it set up but I'm not entirely sure that I understand what it's doing...
The policies are still in place.

w0rdie said:
Can you explain the process? I've got the app and have it set up but I'm not entirely sure that I understand what it's doing...
The policies are still in place.
Click to expand...
Click to collapse
If you are just trying to get past the pin/password requirement this app stores it so you don't have to enter it when unlocking your phone. Not sure if it works for PIN security but it works for PASSWORD security.
Follow these steps:
1. Open app and click on Credentials store password (enter your lockscreen password)
2. Click Try to unlock
3. Check Auto Unlock
4. Click VPN w/o password for >=4.0
5. On the next screen click on # 3. Press Here (to remove phone lock)
That should do it and remove the lockscreen password that exchange forces you to use.

Soundchasr said:
Anyone figured out how to bypass Exchange security on the G2?
Thanks!
Click to expand...
Click to collapse
Have you tried simply increasing the lock timer to, say, 30 min?
I find I don't often have to enter the PIN with it set high like this.

vween said:
Have you tried simply increasing the lock timer to, say, 30 min?
I find I don't often have to enter the PIN with it set high like this.
Click to expand...
Click to collapse
I still want it to lock. I just want to use the pattern instead of the pin and that's not possible with the Exchange policy.

Soundchasr said:
I still want it to lock. I just want to use the pattern instead of the pin and that's not possible with the Exchange policy.
Click to expand...
Click to collapse
Have you tried buying your IT department Mt Dew and Pizza?

w0rdie said:
I would really like to find a way to dodge the lockscreen and other policies that are enforced by Exchange. I don't want to use the KK email.
Click to expand...
Click to collapse
real quick- you do realize that the kitkat email that i posted is in fact modded to dodge those policies, yes? that was why i posted it. install them, set up your account - it will still tell you "your account needs some extra settings" blah, but it won't actually enforce them.
if you're talking about wanting to use the LG email app, well, i don't believe anyone has made a mod for that. i find the new kitkat email app superior anyways, so if you're willing to try it, that is a solution.

fireworksordie said:
real quick- you do realize that the kitkat email that i posted is in fact modded to dodge those policies, yes? that was why i posted it. install them, set up your account - it will still tell you "your account needs some extra settings" blah, but it won't actually enforce them.
if you're talking about wanting to use the LG email app, well, i don't believe anyone has made a mod for that. i find the new kitkat email app superior anyways, so if you're willing to try it, that is a solution.
Click to expand...
Click to collapse
Thanks! Looks like it's time for me to install a recovery then.

Soundchasr said:
Thanks! Looks like it's time for me to install a recovery then.
Click to expand...
Click to collapse
You technically shouldn't need to in order to set it up, but it's not a bad idea to make a nandroid. And it'll make the dalvik wipe/odex removal easier. That part may not even be necessary, but I had some issues the first time installing it where Exchange Services started force closing repeatedly.

[Q] Exchange ActiveSync with Security Policy (Pincode vs. Fingerprint Reader)

hi guys
anyone know how I use the fingerprint reader with exchange policy (enforce password on device)?
with the iphone 5s it works, but with the samsung s5 the fingerprint reader is disabled (Pincode enforced)..
Thank you to all

I dont think they have an option for exchange policy which is kind of stupid. I hope they come out with a fix for this.

tony_k55 said:
hi guys
anyone know how I use the fingerprint reader with exchange policy (enforce password on device)?
with the iphone 5s it works, but with the samsung s5 the fingerprint reader is disabled (Pincode enforced)..
Thank you to all
Click to expand...
Click to collapse
You'll need to download a different app to use for your exchange account. I just downloaded "Nine" and it gives you the option to set the exchange security on the app level instead of the phone level. Two week trial then it's $10.

bgask1717 said:
You'll need to download a different app to use for your exchange account. I just downloaded "Nine" and it gives you the option to set the exchange security on the app level instead of the phone level. Two week trial then it's $10.
Click to expand...
Click to collapse
Thanks, nine is cool but it dosnt support s/mime (for sign an encypt) and imap4 for private use.
I use "smail". it support s/mime and imap4 but not the exchange policy avoiding.
maybe smail will implement this feature in future. smail developer quote: "I will check the nine. But I don't know when I will implement it currently. I am busy with something. I will try to do it. Thank you!"

tony_k55 said:
Thanks, nine is cool but it dosnt support s/mime (for sign an encypt) and imap4 for private use.
I use "smail". it support s/mime and imap4 but not the exchange policy avoiding.
maybe smail will implement this feature in future. smail developer quote: "I will check the nine. But I don't know when I will implement it currently. I am busy with something. I will try to do it. Thank you!"
Click to expand...
Click to collapse
Good deal. I not super familiar with s/mime, but apparently my company does not require that level of security.
Do a Google Play search for Touchdown. Another email client (not as polished looking as Nine) that says it supports s/mime. It's a bit pricier, $20 I believe, after the free trial. If I remember correctly you can set the security at the app level as well. Worth a shot. Hope that helps.

Disabled with my company's policy as well. Was hoping it would work like the iPhone. I can use touchdown or cloudmagic but I prefer the stock email/calendar.
Sent from my SAMSUNG-SM-G900A using XDA Premium 4 mobile app

If u r using this with work email... is it safe (legal) to use other apps?

AirWatch on Nexus

Hi all,
I am still waiting for my Nexus to arrive and will need AirWatch connect to my employer's Exchange. Does Marshmallow or Huawei have an official agent to allow native email client use without bloody TouchDown?
Thanks.

My company also uses AirWatch. Like the Nexus 6, there is not a native email client outside of adding POP/IMAP/Exchange accounts in Gmail.
I am forced to used the Inbox by AirWatch app which is pretty terrible. Also, when your IT department sets up your phone it requires special permissions on their end to use the app. Make sure you request them.
On the plus side, AirWatch has no problems using the fingerprint scanned as a secure method to unlock your phone.
Happy to help if you have any other questions.

Yeah, just tested everything and need to use Touchdown.
Gesendet von meinem Nexus 6P mit Tapatalk

chortya said:
Yeah, just tested everything and need to use Touchdown.
Gesendet von meinem Nexus 6P mit Tapatalk
Click to expand...
Click to collapse
We are apparently going to Airwatch next month... The airwatch client gets terrible reviews and while Touchdown isn't ideal, I've used it before and I can live with it. Did you have to do anything special to get Touchdown to work with Airwatch?

No, we have an automated policy which downloads and configures Touchdown for us. No issues. I just wish Touchdown would integrate into the native calender... The rest is ok.
Gesendet von meinem Nexus 6P mit Tapatalk

I use 9 for exchange/company email.

ycats said:
I use 9 for exchange/company email.
Click to expand...
Click to collapse
So 9 email works with Airwatch? I am using it my exchange email now, but we are implementing Airwatch next month. I would definitely like to keep using 9 if possible.

chortya said:
No, we have an automated policy which downloads and configures Touchdown for us. No issues. I just wish Touchdown would integrate into the native calender... The rest is ok.
Click to expand...
Click to collapse
Same here. Your enterprise should have it set up so that TD more or less configures automatically once you've enrolled the device through AirWatch.
Now, my big question is whether it will continue to work if I'm rooted. I never had a problem in the past, but recently when I upgraded my old rooted Nexus 5 to Android 6.0 and then re-rooted it, I lost the ability to enroll with AirWatch. I'm not sure what happened but I know Airwatch doesn't want your phone to be rooted.

chortya said:
Hi all,
I am still waiting for my Nexus to arrive and will need AirWatch connect to my employer's Exchange. Does Marshmallow or Huawei have an official agent to allow native email client use without bloody TouchDown?
Thanks.
Click to expand...
Click to collapse
Were you able to connect your 6P to Exchange?

Not directly, only with TouchDown.
Gesendet von meinem Pixel C mit Tapatalk

Mark7A said:
Were you able to connect your 6P to Exchange?
Click to expand...
Click to collapse
Give Nine Mail a try...much better than touchdown IMO and works with AirWatch. You will need to manually configure the settings (mostly the server address) but its pretty simple.

I tried it before but our corporate policy did not allow the connection. I assume based on the user agent ir similar identification of the mail client.
Gesendet von meinem Nexus 6P mit Tapatalk

We are going airwatch too but huge let down is no root devices allowed to enroll. I always thought rooted devices can be or are more secure. Any ideas round this

bkayy said:
We are going airwatch too but huge let down is no root devices allowed to enroll. I always thought rooted devices can be or are more secure. Any ideas round this
Click to expand...
Click to collapse
Only way I found was to use Xposed and the Unwatch module ...also it failed until I went with systemless root. Using Nine Mail and it is flawless.
Root cloak did not work and I am going to try to never update the Airwatch app as who knows if it will keep working.

tfly212 said:
Only way I found was to use Xposed and the Unwatch module ...also it failed until I went with systemless root. Using Nine Mail and it is flawless.
Root cloak did not work and I am going to try to never update the Airwatch app as who knows if it will keep working.
Click to expand...
Click to collapse
I have the most recent version of Airwatch and Unwatch Xposed module and I can get passed the root check. My company specifically blocks Nine from working though.
The Nexus 6p has an Exchange email setup built in. See the link below:
http://support.sprint.com/support/t.../WScenario_542_62075_771_en_118-dvc9700001prd
My company also blocks that
So if neither of those work for you, you may be stuck with Touchdown as well.
Update: Aquamail and Boomerang work for me. I'm using Aquamail since it seems to work with Google calendar.

tfly212 said:
Give Nine Mail a try...much better than touchdown IMO and works with AirWatch. You will need to manually configure the settings (mostly the server address) but its pretty simple.
Click to expand...
Click to collapse
Hi there.
Sorry, could you please clarify how you made Nine work with Airwatch?
My company just enforced Airwatch this month so my Nine client stopped syncing... what would I need to do? The server address I was previously using doesn't seem to be working anymore.
I'm desperate to know this since the "Airwatch Inbox" app is utter crap.
Also, is there any way to get the calendar synced with other app than this "Airwatch Calendar" bull****? I really want to have a homescreen widget showing my upcoming meetings, but I can no longer do that since 3rd party apps can't access my work calendar anymore.
Any help would be really appreciated.

VictorML said:
Hi there.
Sorry, could you please clarify how you made Nine work with Airwatch?
My company just enforced Airwatch this month so my Nine client stopped syncing... what would I need to do? The server address I was previously using doesn't seem to be working anymore.
I'm desperate to know this since the "Airwatch Inbox" app is utter crap.
Also, is there any way to get the calendar synced with other app than this "Airwatch Calendar" bull****? I really want to have a homescreen widget showing my upcoming meetings, but I can no longer do that since 3rd party apps can't access my work calendar anymore.
Any help would be really appreciated.
Click to expand...
Click to collapse
First I used systemless root ...but not a ROM with systemless root included, that failed. Flashed to stock and then systemless rooted. Installed Xposed and then UnWatch. Then Nine, then Airwatch.
My Nine settings are attached below. You want to use your official outlook name email for the domain/user and then insert your company email alias after the awmdm in the server line.
For the calendar I didn't have to do anything other than choose to sync calendar in Nine. Then I added the pure calendar widget and have a scrolling view of all outlook and Google appointments.
I was petrified of flashing the update to the March security update...but it worked. I have not, and will not update airwatch until something breaks.
Hope this helps. If I can answer anything else, Lmk.

tfly212 said:
First I used systemless root ...but not a ROM with systemless root included, that failed. Flashed to stock and then systemless rooted. Installed Xposed and then UnWatch. Then Nine, then Airwatch.
My Nine settings are attached below. You want to use your official outlook name email for the domain/user and then insert your company email alias after the awmdm in the server line.
For the calendar I didn't have to do anything other than choose to sync calendar in Nine. Then I added the pure calendar widget and have a scrolling view of all outlook and Google appointments.
I was petrified of flashing the update to the March security update...but it worked. I have not, and will not update airwatch until something breaks.
Hope this helps. If I can answer anything else, Lmk.
Click to expand...
Click to collapse
Question: the whole flashing and unflashing of everything was just to be able to use root, right?
I'm OK with not having root for now - all I really want is to use Nine instead of this crappy Airwatch Inbox app.
I've checked said Airwatch Inbox app, and the server settings are the same as they were before. So not vmdm.XXXXX.com like in your screenshot, but the same email server we were using before. However that fails in Nine now.
I've also checked the enrollment status in the "Airwatch Agent" app, and ironically it does show vmdm.XXXXX.com in there as the server.
Sounds to me like your company didn't really restrict the use of third party apps maybe?

VictorML said:
Question: the whole flashing and unflashing of everything was just to be able to use root, right?
I'm OK with not having root for now - all I really want is to use Nine instead of this crappy Airwatch Inbox app.
I've checked said Airwatch Inbox app, and the server settings are the same as they were before. So not vmdm.XXXXX.com like in your screenshot, but the same email server we were using before. However that fails in Nine now.
I've also checked the enrollment status in the "Airwatch Agent" app, and ironically it does show vmdm.XXXXX.com in there as the server.
Sounds to me like your company didn't really restrict the use of third party apps maybe?
Click to expand...
Click to collapse
Good question... I'm not sure how restrictive they are...most of our firm uses IPhones so I was lone wolfing a lot of this. I emailed the developer of Nine and they said it should work without any issues. I also never installed the inbox app...only the airwatch app and just plugged the settings into Nine.
In all honestly though, I don't think I tried nine without being rooted and using the UnWatch xposed module...that may be a requirement. I knew I wanted root so I may have only gone that route.

tfly212 said:
Good question... I'm not sure how restrictive they are...most of our firm uses IPhones so I was lone wolfing a lot of this. I emailed the developer of Nine and they said it should work without any issues. I also never installed the inbox app...only the airwatch app and just plugged the settings into Nine.
In all honestly though, I don't think I tried nine without being rooted and using the UnWatch xposed module...that may be a requirement. I knew I wanted root so I may have only gone that route.
Click to expand...
Click to collapse
Yeah I also emailed Nine devs. They told me that IF our AirWatch solution is "based" on Android for Work, I could just install this: https://play.google.com/store/apps/details?id=com.ninefolders.hd3.work, and it should work.
But I don't even know how to check if they're using Android for Work.
That app just tells me that a configuration file is needed, and I can't enter any login details on it.
I'll keep talking to the devs and I'll try to speak to someone in our IT department as well... ahh the perks of working for a huge multinational company. The person in charge of this probably lives somewhere with an 8 hour time difference with me, and a salary of $3 per hour.
Sigh.

Rooted by Encryption is Required for Work

So I am required to have work email, but along with that they enforce encryption on the device.
H918 rooted with TWRP installed and when setting up email it wants me to plug in my phone so it applies encryption.
Guess I might have to go back to stock for this?

BrokenWall said:
So I am required to have work email, but along with that they enforce encryption on the device.
H918 rooted with TWRP installed and when setting up email it wants me to plug in my phone so it applies encryption.
Guess I might have to go back to stock for this?
Click to expand...
Click to collapse
is this done through Exchange?

Yes it is. I am using Outlook app right now which allows email to be handled via the app and only requires a pin to be set.

BrokenWall said:
Yes it is. I am using Outlook app right now which allows email to be handled via the app and only requires a pin to be set.
Click to expand...
Click to collapse
oh, so problem solved then? I actually use the Nine app for work e-mail, which also does the same whereby you can have Exchange only apply to the email app or the device... pricey app though

dimm0k said:
oh, so problem solved then? I actually use the Nine app for work e-mail, which also does the same whereby you can have Exchange only apply to the email app or the device... pricey app though
Click to expand...
Click to collapse
Yep I am using the Outlook App and have no issues. Though the downside is having to use the Outlook app to access the work Calendar as well. But that is no big deal.