Bypass Exchange Security? - G2 Q&A, Help & Troubleshooting

Anyone figured out how to bypass Exchange security on the G2?
Thanks!

Soundchasr said:
Anyone figured out how to bypass Exchange security on the G2?
Thanks!
Click to expand...
Click to collapse
Would like to know this too. In the meantime search for an xposed mod. Notification mod. This one allows you to use the notification pulldown.
Helps a lot.
Sent from my LG-D802 using Tapatalk

Anyone? Please?

Soundchasr said:
Anyone figured out how to bypass Exchange security on the G2?
Thanks!
Click to expand...
Click to collapse
Did you try new Google KitKat email app? Make sure that you install both Email and Exchange 2 email apk.
http://androidcommunity.com/nexus-5...s-android-4-4-google-apps-downloads-20131101/

the easy answer is to use enhanced email, can be found in Google Play. I am using that myself

alex72 said:
Did you try new Google KitKat email app? Make sure that you install both Email and Exchange 2 email apk.
http://androidcommunity.com/nexus-5...s-android-4-4-google-apps-downloads-20131101/
Click to expand...
Click to collapse
I think the OP like me wants to bypass the security set by the rules, not the app itself.
henrylar said:
the easy answer is to use enhanced email, can be found in Google Play. I am using that myself
Click to expand...
Click to collapse
Best most money on an app spent!.... NOT...DOESN'T WORK IN MY CASE...
And you know 15 minutes are not enough to even try it due to the options and testing and hoping. Bought it long ago. In my case it didn't work...
Company has its own app. And another 2 apps checking if the app is admin etc.
Only thing that could be done is either to input the pass automatically when I unlock the phone. Maybe something via xposed. And add a second screen unlock option.
Somewhat like the iPhone jailbreak has it...loved the security bypass plus android pattern unlock....
Sent from my LG-D802 using Tapatalk

Can someone try this? Saw it in company forums. But might be completely unrelated https://play.google.com/store/apps/details?id=ru.chunky.AutoKeystore&hl=en

I use touchdown so the policy is applied to the app and not the device.
Sent from my LG-D803 using XDA Premium 4 mobile app

PAGOT said:
I think the OP like me wants to bypass the security set by the rules, not the app itself.
Best most money on an app spent!.... NOT...DOESN'T WORK IN MY CASE...
And you know 15 minutes are not enough to even try it due to the options and testing and hoping. Bought it long ago. In my case it didn't work...
Company has its own app. And another 2 apps checking if the app is admin etc.
Only thing that could be done is either to input the pass automatically when I unlock the phone. Maybe something via xposed. And add a second screen unlock option.
Somewhat like the iPhone jailbreak has it...loved the security bypass plus android pattern unlock....
Sent from my LG-D802 using Tapatalk
Click to expand...
Click to collapse
It depends obviously then on how the exchange server is configured. In my case e-email bypasses the security demands from the exchange server completely. When I had my HTC sensation, I used a mod you can find in the HTC sensation development, search for exchange - there is also something about using it with other phones.

see this post for files/kudos: http://forum.xda-developers.com/showpost.php?p=47063058&postcount=406
however, you don't need to push via ADB or anything:
1) uninstall your current email and exchange apks (via titanium backup or something similar)
2) either wipe dalvik cache or delete the associated email and exchange odex files in /data/dalvik-cache
3) install the 2 APKs (i usually install exchange first, then email)
4) setup your email
been working perfectly for me for the past week.
EDIT: this is the new 4.4 email/exchange, btw, with the gmail-style interface. it's fantastic.

I would really like to find a way to dodge the lockscreen and other policies that are enforced by Exchange. I don't want to use the KK email.

I use an app called Keystore Unlocker from the play store...must be rooted. You can skip the step adding a VPN and it will still work.
Sent from my VS980 4G using xda app-developers app

tlbland0426 said:
I use an app called Keystore Unlocker from the play store...must be rooted. You can skip the step adding a VPN and it will still work.
Sent from my VS980 4G using xda app-developers app
Click to expand...
Click to collapse
Can you explain the process? I've got the app and have it set up but I'm not entirely sure that I understand what it's doing...
The policies are still in place.

w0rdie said:
Can you explain the process? I've got the app and have it set up but I'm not entirely sure that I understand what it's doing...
The policies are still in place.
Click to expand...
Click to collapse
If you are just trying to get past the pin/password requirement this app stores it so you don't have to enter it when unlocking your phone. Not sure if it works for PIN security but it works for PASSWORD security.
Follow these steps:
1. Open app and click on Credentials store password (enter your lockscreen password)
2. Click Try to unlock
3. Check Auto Unlock
4. Click VPN w/o password for >=4.0
5. On the next screen click on # 3. Press Here (to remove phone lock)
That should do it and remove the lockscreen password that exchange forces you to use.

Soundchasr said:
Anyone figured out how to bypass Exchange security on the G2?
Thanks!
Click to expand...
Click to collapse
Have you tried simply increasing the lock timer to, say, 30 min?
I find I don't often have to enter the PIN with it set high like this.

vween said:
Have you tried simply increasing the lock timer to, say, 30 min?
I find I don't often have to enter the PIN with it set high like this.
Click to expand...
Click to collapse
I still want it to lock. I just want to use the pattern instead of the pin and that's not possible with the Exchange policy.

Soundchasr said:
I still want it to lock. I just want to use the pattern instead of the pin and that's not possible with the Exchange policy.
Click to expand...
Click to collapse
Have you tried buying your IT department Mt Dew and Pizza?

w0rdie said:
I would really like to find a way to dodge the lockscreen and other policies that are enforced by Exchange. I don't want to use the KK email.
Click to expand...
Click to collapse
real quick- you do realize that the kitkat email that i posted is in fact modded to dodge those policies, yes? that was why i posted it. install them, set up your account - it will still tell you "your account needs some extra settings" blah, but it won't actually enforce them.
if you're talking about wanting to use the LG email app, well, i don't believe anyone has made a mod for that. i find the new kitkat email app superior anyways, so if you're willing to try it, that is a solution.

fireworksordie said:
real quick- you do realize that the kitkat email that i posted is in fact modded to dodge those policies, yes? that was why i posted it. install them, set up your account - it will still tell you "your account needs some extra settings" blah, but it won't actually enforce them.
if you're talking about wanting to use the LG email app, well, i don't believe anyone has made a mod for that. i find the new kitkat email app superior anyways, so if you're willing to try it, that is a solution.
Click to expand...
Click to collapse
Thanks! Looks like it's time for me to install a recovery then.

Soundchasr said:
Thanks! Looks like it's time for me to install a recovery then.
Click to expand...
Click to collapse
You technically shouldn't need to in order to set it up, but it's not a bad idea to make a nandroid. And it'll make the dalvik wipe/odex removal easier. That part may not even be necessary, but I had some issues the first time installing it where Exchange Services started force closing repeatedly.

Related

Finally updated to Froyo

Have a question though. I added my work email to my account and the only way it would work was to add a pin when unlocking my screen. Is there any way to disable this besides removing my work email account?
Thanks.
My wife uses an app called Lockpicker to disable it on her Hero, which works pretty well. I think it might only work on Sense devices, but you can give it a try.
smooney3 said:
My wife uses an app called Lockpicker to disable it on her Hero, which works pretty well. I think it might only work on Sense devices, but you can give it a try.
Click to expand...
Click to collapse
No go on 2.2
When my friend got froyo on his phone he looked into it and it requires rooting and somethingsomething (so I wasn't paying attn... ) but it's possible!
mynewepic10 said:
Have a question though. I added my work email to my account and the only way it would work was to add a pin when unlocking my screen. Is there any way to disable this besides removing my work email account?
Thanks.
Click to expand...
Click to collapse
This is not a glitch, it's a the phone complying with the AD email server's security requirements. If you have a problem with this, the appropriate place to ask is your IT dept, not XDA. They were the ones that set the requirement for a lock.

[MOD] Stock Mail.apk with the exchange policy removed

First off I take no credit for this at all. All credit goes to Rsotbiemrptson who is a Jedi master for creating this after many have tried and failed.
What you have here is a flashable crack to the HTC Mail.apk that will bypass any and all security administrators that may be otherwise forced onto your device when syncing to an exchange server.
To install:
1. You must remove all mail accounts that you have set up in the Mail app.
2. If you have any existing security administrators present from a previous exchange sync deactivate them.
3. Set your lock time out to none under security settings.
4. Reboot into recovery and wipe Dalvik Cache
5. Flash the attached file.
As with all mods or changes to ROMS do a complete backup in recovery.
If you find this useful please send all thanks to Rsotbiemrptson for cracking this bad boy.
Has anyone tried this?
sdorn77 said:
Has anyone tried this?
Click to expand...
Click to collapse
I don't really understand the point of it. Is there something wrong with Exchange on the Tbolt? Mine works fine.
Shiftyshadee said:
I don't really understand the point of it. Is there something wrong with Exchange on the Tbolt? Mine works fine.
Click to expand...
Click to collapse
This is for people who want to use their Exchange account on their Tbolt, but DON'T want to give their Exchange admin the ability to enforce security policies on their phone (like having to enter a PIN every time you unlock the screen). Sounds like your Exchange admin doesn't implement any of those policies, so you don't need this.
Is this something that was implemented in newer versions of Exchange? I think my company uses 2007 still. Might be why I haven't seen this.
i managed to get my gmail, hotmail an windjammercable mail setup though exchange on my thunderbolt, but i kept getting sync errors where it would try to sync all three emails like every 5 seconds when the phone was operating in peak time. My battery went from like 100 to like 75 in less than 20 minutes So i had to just delete all the email setting i changed an go back to what i had before.
Now, if install your mail akp will this stop the sync errors?
Shiftyshadee said:
Is this something that was implemented in newer versions of Exchange? I think my company uses 2007 still. Might be why I haven't seen this.
Click to expand...
Click to collapse
It's been around since at least the 2003 version but it's all optional settings, your admin may just not have them enabled. Mine doesn't.
Jacquestrapp said:
It's been around since at least the 2003 version but it's all optional settings, your admin may just not have them enabled. Mine doesn't.
Click to expand...
Click to collapse
Gotcha. Thanks for clearing that up for me
This absolutely works on all DAS BAMF roms but should work on any ROM including stock. You only need this if you have exchange policies pushed to your phone by your company. If you don't know what this is you prob don't need it.
I do not know if it will fix the afore mentioned sync errors but I would doubt it.
Here's a new question. When I had CM7 on my Incredible, Exchange wanted to setup device admin rights. Now on my Tbolt with Sense I don't get asked. Any idea why?
madroix said:
This absolutely works on all DAS BAMF roms but should work on any ROM including stock. You only need this if you have exchange policies pushed to your phone by your company. If you don't know what this is you prob don't need it.
I do not know if it will fix the afore mentioned sync errors but I would doubt it.
Click to expand...
Click to collapse
I have installed this on DAS BAMF remix v1.4 and it does work so far. I was able to remove the PIN lock and use a pattern lock, which was not permitted before. Also, I didn't get the exchange security policy notice when I added my exchange account. Syncing appears to be working properly as well so far.
The mod is quite honestly ridiculous. Whats the point of trying to have security setup and protect possible sensitive information, when you don't want an Admin to enforce security rights.
This 100% defeats the purpose that was set in place by Exchange for good reason's. I sure hope everyone understands the SERIOUS consequences of what could happen by flashing this and possibly leak sensitive data into the wrong hands.
^^ it's a very good point. One of the problems with AS and lock screens is that with the default client and iPhones you have to pin to unlock even the phone. Nothing to do with email, just the darn phone. So everyone hates it. I use Touchdown which only requires a pin if you go to check email. But it's $20. Anyway, be careful with hacks that bypass security in a workplace. It could be cause for termination.
I love my phone, I've loved ALL my devices... Yes, I use it for work with MS Exchange email (MS Consultant), and yes the pin/password policies are annoying.
But I'm not about to risk my job over some "hassle" of 3 seconds to enter a pin. Aren't our email Administrators able to see we bypassed this or no?
oc3rulz said:
The mod is quite honestly ridiculous. Whats the point of trying to have security setup and protect possible sensitive information, when you don't want an Admin to enforce security rights.
This 100% defeats the purpose that was set in place by Exchange for good reason's. I sure hope everyone understands the SERIOUS consequences of what could happen by flashing this and possibly leak sensitive data into the wrong hands.
Click to expand...
Click to collapse
To be honest, if someone wanted my data or emails a stupid 4 digit pin is not going to stop them. There are many ways in getting a persons email off of there phone without even unlocking it. This seems like it is for those small companies who's admins are security freaks and its really not needed. Granted, I am sure apple would not be happy if an employee used this app or an android phone lol
Sent from my ADR6400L using XDA Premium App
It is important to keep sensitive data secure. I think a properly set up pattern lock is as good as a 4 digit PIN. I use lookout to be able to remotely wipe if needed.
THANK YOU SO MUCH! Hats off to the dev.
Do I have to remove gmail accounts too, or just the active sync exchange accounts?
Sent from my ADR6400L using XDA App
chriskader said:
To be honest, if someone wanted my data or emails a stupid 4 digit pin is not going to stop them. There are many ways in getting a persons email off of there phone without even unlocking it. This seems like it is for those small companies who's admins are security freaks and its really not needed. Granted, I am sure apple would not be happy if an employee used this app or an android phone lol
Sent from my ADR6400L using XDA Premium App
Click to expand...
Click to collapse
Let them get in hacking your password/pin, you won't be held responsible. However if you have the phone pin/password disabled and they realize this you will be terminated. They will be able to see that you are bypassing security measures, and you could have lawsuit on your hands as well.
Please dont think that I am bashing the dev, I'm simply trying to let people know that they very well could and most likely lose their job and have possible legal action taken against them for using this. Cellphones are such a volatile thing anyhow, but giving them an easier way in is not a good idea, especially not while breaking company policy.
oc3rulz said:
Let them get in hacking your password/pin, you won't be held responsible. However if you have the phone pin/password disabled and they realize this you will be terminated. They will be able to see that you are bypassing security measures, and you could have lawsuit on your hands as well.
Please dont think that I am bashing the dev, I'm simply trying to let people know that they very well could and most likely lose their job and have possible legal action taken against them for using this. Cellphones are such a volatile thing anyhow, but giving them an easier way in is not a good idea, especially not while breaking company policy.
Click to expand...
Click to collapse
Like I said, they don't even Ned to unlock your phone e to read the emails on of. Google it.
Sent from my ADR6400L using XDA Premium App

[MOD][5.21.11]GingerBread Mail with Exchange Policies Disabled (Needs Testers)

Didn't know this was already done. My bad!
Testing now!
will test when i get home
I get nothing but fc's for the mail app when I try to launch it. I did clear davlik after flashing the zip.
Cubs2008 said:
I get nothing but fc's for the mail app when I try to launch it. I did clear davlik after flashing the zip.
Click to expand...
Click to collapse
Crud. Guess I will try again once I get home. Thanks for testing!
adrynalyne said:
Crud. Guess I will try again once I get home. Thanks for testing!
Click to expand...
Click to collapse
No worries...you know I got a nandroid restoring as we speak.
Why redo you efforts if it already exists:
http://forum.xda-developers.com/showthread.php?t=775007
Been using this since day uno!
What exactly does this do? What policies does this disable? I use exchange at work so....
Carsten4207 said:
Why redo you efforts if it already exists:
http://forum.xda-developers.com/showthread.php?t=775007
Been using this since day uno!
Click to expand...
Click to collapse
I didn't know it existed. Thanks.
Sent from my ADR6400L using XDA App
I took a look at the link. Thats for aosp email. I am trying to modify Sense email.
Thanks though.
durh
10/char
Cubs2008 said:
I get nothing but fc's for the mail app when I try to launch it. I did clear davlik after flashing the zip.
Click to expand...
Click to collapse
Did you remove the exchange acount and reset the mail permissions before installing the apk?
adrynalyne: can you put the apk back up or send it to me, I would like to try it on a fresh install before an exchange account is created on the device.
I can confirm it just force closes as well.
Thank you and I appreciate it. Just so you know, when I go to set it up, it says Security Policies required, (Your Exchange server requires that you enable security policies to continue synchronizing, would you like to continue? Once I click on OK, The 4 policies it's trying to implement are:
1. Erase all Data
2. Set password rules
3. Monitor screen-unlock attempts
4. Lock the Screen
I hit Activate and it asks me to create my PIN which I do, then click OK and then I get my failure notice, lol.
Exchange Policy Error
Unable to sing in to your Exchange account because your policy settings are incompatible with those on the server. Please contact you IT team for assistance. I click on Detail and get: Security policy required:
Policy settin incompatible
Require device encryption
Please contact your IT team for assistance.
I hope this helps in troubleshooting the issue.
adrynalyne said:
I took a look at the link. Thats for aosp email. I am trying to modify Sense email.
Thanks though.
Click to expand...
Click to collapse
Would love the sense version of this!
Sent from my Xoom using XDA Premium App

Lock Pattern issues

10 incorrect unlock patterns deletes data? I just viewed this in youtube and now im a bit hesitant. What if the phone was stolen? They can still use it?? How secure is that??
http://youtu.be/jHwQf4-bJzAy
That why you report it lost or stolen
Sent from my HTC One_M8 using XDA Premium 4 mobile app
The video isn't working but that's just stupid if true. What if your friend is ****ing around just trying to lock it and make you wait like on iPhone and there goes all the data
Sent from my HTC One_M8 using xda app-developers app
This is a horrible feature if true, if your phone is stolen the thief can reset it and have a brand new phone like he got it out of the shop
Well by reporting it stolen it would be known to carriers as a stolen phone and the IMEI would be registered
This has already been discussed in depth including the option to disable it. When the security of the data on the device is more important than the device itself, the feature is a wanted/required one. Most people would rather the phone not self destruct though.
http://forum.xda-developers.com/showthread.php?t=2701911
I just tried this on my phone and it didn't do anything. After 5 attempts I had to wait30 seconds and then after another5 it said you incorrectly entered the pattern 10 times and had to wait another30 seconds
Sent from my HTC One_M8 using xda app-developers app
l7777 said:
This has already been discussed in depth including the option to disable it. When the security of the data on the device is more important than the device itself, the feature is a wanted/required one. Most people would rather the phone not self destruct though.
http://forum.xda-developers.com/showthread.php?t=2701911
Click to expand...
Click to collapse
Thanks for the info
After permanenty locked you enter your email and password,
Is this present in every variant of m8? And no way to disable the automatic wiping of data without root? :-/
Sent from my HTC One using Tapatalk 4
vari9 said:
Is this present in every variant of m8? And no way to disable the automatic wiping of data without root? :-/
Sent from my HTC One using Tapatalk 4
Click to expand...
Click to collapse
Unknown, I can only confirm the Verizon variant. It appears to be an android setting though not an HTC centric one.
Mine doesn't show the "delete waring" and isn't resetting anything. My phone is unbranded and stock rom.
Asmund said:
Mine doesn't show the "delete waring" and isn't resetting anything. My phone is unbranded and stock rom.
Click to expand...
Click to collapse
You only really get it if you're using Exchange as email. I never had this "8 tries left before resetting phone" until I added my work email. If you have your work email and this is happening to you it's probably because your work requires that level of security. If you want to avoid it, just don't add your work email. There are ways to bypass it if you root, however some times (depending on admins) your job's IT dept can tell and you may have issues keeping said job.
Kypt said:
You only really get it if you're using Exchange as email. I never had this "8 tries left before resetting phone" until I added my work email. If you have your work email and this is happening to you it's probably because your work requires that level of security. If you want to avoid it, just don't add your work email. There are ways to bypass it if you root, however some times (depending on admins) your job's IT dept can tell and you may have issues keeping said job.
Click to expand...
Click to collapse
My phone is in fact set up for my work Exchange mail. Maybe some security is disabled in the Exchange server settings...
Asmund said:
My phone is in fact set up for my work Exchange mail. Maybe some security is disabled in the Exchange server settings...
Click to expand...
Click to collapse
Yeah I'd bet you anything that's what it is. My previous job used exchange as well but they did not have security enabled. As soon as I moved into my new job I had to set up a pin. It's a choice your employer's IT dept does whether by regulation or just more security-aware.
Kypt said:
You only really get it if you're using Exchange as email. I never had this "8 tries left before resetting phone" until I added my work email. If you have your work email and this is happening to you it's probably because your work requires that level of security. If you want to avoid it, just don't add your work email. There are ways to bypass it if you root, however some times (depending on admins) your job's IT dept can tell and you may have issues keeping said job.
Click to expand...
Click to collapse
Kypt said:
Yeah I'd bet you anything that's what it is. My previous job used exchange as well but they did not have security enabled. As soon as I moved into my new job I had to set up a pin. It's a choice your employer's IT dept does whether by regulation or just more security-aware.
Click to expand...
Click to collapse
Asmund said:
My phone is in fact set up for my work Exchange mail. Maybe some security is disabled in the Exchange server settings...
Click to expand...
Click to collapse
Exchange security can manipulate the settings but it appears to be enabled by default in Verizon's variant.

Rooted by Encryption is Required for Work

So I am required to have work email, but along with that they enforce encryption on the device.
H918 rooted with TWRP installed and when setting up email it wants me to plug in my phone so it applies encryption.
Guess I might have to go back to stock for this?
BrokenWall said:
So I am required to have work email, but along with that they enforce encryption on the device.
H918 rooted with TWRP installed and when setting up email it wants me to plug in my phone so it applies encryption.
Guess I might have to go back to stock for this?
Click to expand...
Click to collapse
is this done through Exchange?
Yes it is. I am using Outlook app right now which allows email to be handled via the app and only requires a pin to be set.
BrokenWall said:
Yes it is. I am using Outlook app right now which allows email to be handled via the app and only requires a pin to be set.
Click to expand...
Click to collapse
oh, so problem solved then? I actually use the Nine app for work e-mail, which also does the same whereby you can have Exchange only apply to the email app or the device... pricey app though
dimm0k said:
oh, so problem solved then? I actually use the Nine app for work e-mail, which also does the same whereby you can have Exchange only apply to the email app or the device... pricey app though
Click to expand...
Click to collapse
Yep I am using the Outlook App and have no issues. Though the downside is having to use the Outlook app to access the work Calendar as well. But that is no big deal.

Categories

Resources