Exchange Security Bypass - One (M8) Themes and Apps

Works perfectly!
http://forum.xda-developers.com/showthread.php?p=51509034
Sent from my HTC One_M8 using Tapatalk

I added an exchange account to my one yesterday, to ARHD 3.0 with no modded Exchange - I was not prompted to add additional security at all.

Electronic Punk said:
I added an exchange account to my one yesterday, to ARHD 3.0 with no modded Exchange - I was not prompted to add additional security at all.
Click to expand...
Click to collapse
Would you normally be prompted? My exchange account is through my employer and security is enabled. I'm on ARHD as well but it prompted me for a PIN. After flashing the patch it did not.
Sent from my HTC One_M8 using Tapatalk

Maybe not, my tablet did - found it strange there was nothing.
Lockscreen still completely disabled

Anyone having issues? I flashed, wiped cache, and app data and get force close when trying to open the app. Someone have the original mail apk so I can at least get it working? Only thing I've flashed is the system writable and swipe to screen off mod.
Sent from my 831C using Tapatalk

henderjr said:
Anyone having issues? I flashed, wiped cache, and app data and get force close when trying to open the app. Someone have the original mail apk so I can at least get it working? Only thing I've flashed is the system writable and swipe to screen off mod.
Sent from my 831C using Tapatalk
Click to expand...
Click to collapse
Did you try to clear the data and cache from the app? Go to Settings > Apps and clear the data and cache from Mail and then reboot and see if that works.
I deleted all my accounts from Mail before I went and flashed the ZIP and it worked fine.

Tikerz said:
Did you try to clear the data and cache from the app? Go to Settings > Apps and clear the data and cache from Mail and then reboot and see if that works.
I deleted all my accounts from Mail before I went and flashed the ZIP and it worked fine.
Click to expand...
Click to collapse
I tried that. I ended up factory resetting and that worked. I think it was the HTC backup restoring accounts that messed it up. Sorry to clog the thread with some bs.
Sent from my 831C using Tapatalk

Last thing I need is to read work email on my phone..

As somebody that works in Infosec this disturbs me. Please be aware that if you install this, and your company suffers and Unauthorized Disclosure or Breach that was caused by you bypassing controls will probably result in your termination.

ekinnee said:
As somebody that works in Infosec this disturbs me. Please be aware that if you install this, and your company suffers and Unauthorized Disclosure or Breach that was caused by you bypassing controls will probably result in your termination.
Click to expand...
Click to collapse
I think a-lot of companies are catching on and requiring MDM software to be installed on your phone. My employer started requiring AirWatch. At that point I decided to accept a company iPhone as I didn't want them having that much control over my personal device.

ekinnee said:
As somebody that works in Infosec this disturbs me. Please be aware that if you install this, and your company suffers and Unauthorized Disclosure or Breach that was caused by you bypassing controls will probably result in your termination.
Click to expand...
Click to collapse
I've talked to the exchange administrator and he told me they do not have any security setting enabled on the server side. This is a known bug in the Android email app that it requires a pin regardless of the server settings.

eagercrow said:
I've talked to the exchange administrator and he told me they do not have any security setting enabled on the server side. This is a known bug in the Android email app that it requires a pin regardless of the server settings.
Click to expand...
Click to collapse
Yeah. It may be a bug that requires it no matter what. But, I know we enforce a pin and encryption which makes flashing a pain. Just want people to be aware there are consequences to using this.
Sent from my HTC One_M8 using Tapatalk

ekinnee said:
Yeah. It may be a bug that requires it no matter what. But, I know we enforce a pin and encryption which makes flashing a pain. Just want people to be aware there are consequences to using this.
Sent from my HTC One_M8 using Tapatalk
Click to expand...
Click to collapse
Can you get root and/or custom roms if you have encryption on for exchange purposes?

ashamir said:
Can you get root and/or custom roms if you have encryption on for exchange purposes?
Click to expand...
Click to collapse
Sure. I'm rooted and have run ROMs while encrypted. It is more difficult to flash as you cannot access encrypted storage from Recovery. Most flashing has to be done via adb sideload.
Many Companies will not only enforce the encryption and PIN but will also block rooted phones.
Sent from my HTC One_M8 using Tapatalk

I wish it has the feature like DroidMail app which does not ask the email administrator to approve the device.
Sent from my HTC One_M8 using xda app-developers app

jasbur17 said:
I think a-lot of companies are catching on and requiring MDM software to be installed on your phone. My employer started requiring AirWatch. At that point I decided to accept a company iPhone as I didn't want them having that much control over my personal device.
Click to expand...
Click to collapse
Funny that you mentioned that. I used to work at AirWatch (Almost 3 years).

hi,
does someone know if there is a version of this mod for odexed version of ARHD 5.5, (I'd like to try ART), or how to make it work?
thanks!

Has someone tested this version on ARHD 7.0 ? (nonART/Deodexed version)
Thanks!
Envoyé de mon HTC One_M8 en utilisant Tapatalk

I actually found best compromise, Nine app is in my opinion, best exchange client, allows me to set PIN on app instead on device, no rooting required, syncs to native contacts and calendar app...worth every penny!
https://play.google.com/store/apps/details?id=com.ninefolders.hd3

nuts77 said:
hi,
does someone know if there is a version of this mod for odexed version of ARHD 5.5, (I'd like to try ART), or how to make it work?
thanks!
Click to expand...
Click to collapse
I'm having problems with the mail app using ART enabled on insert coin 3.0.3, suspect this may be the cause... Ideas anyone?
Sent from my HTC One_M8 using Tapatalk

Related

How To Disable Exchange Security Policy FROYO!!

Found a way around the enforcement of The Exchange security policy on FROYO (ROOT USERS ONLY), at least until lockpicker gets FROYO support.
You need to unzip and install the attached APK. It will give you an extra mail application on the phone (The Saphire, White envelope, and Gold Message popping out icon), but you can remove the stock one if you have some knowhow, or just delete your account from the stock one.
I take no credit for this. Original work done by raidzero at http://www.droidforums.net/forum/dr...onal-froyo-bypass-exchange-server-policy.html
Disclaimer: For Educational use only. I take no responsibility for your company firing you because you lost precious confidential information.
Edit: I see that member afflaq already posted a similar fix here: http://forum.xda-developers.com/showthread.php?t=729753&highlight=exchange+security
I downloaded the zip file but I am new to rooting and not quite sure how to apply this zip to my phone... do i copy to root of sd card and boot into bootloader and apply it that way via recovery? or can i run the zip from the phone on normal boot.
broj999 said:
I downloaded the zip file but I am new to rooting and not quite sure how to apply this zip to my phone... do i copy to root of sd card and boot into bootloader and apply it that way via recovery? or can i run the zip from the phone on normal boot.
Click to expand...
Click to collapse
You have to extract the apk from the zip file, and then just install the apk from a file manager program like estrongs or astro. You do not need to use recovery or the bootloader for this at all. I probably should gave just posted the apk, without zipping it up to avoid confusion but i didn't.
I have been hit with this ridiculous security policy too, my IT admin guy just shrugs his shoulders, and it doesn't seem to hit iPhones (which are hopeless for security anyway?).
So when I install .apk, do I then need to migrate my Exchange account to a new mail application?
I have a rooted phone, is there any way to just disable Exchange security policy? It even allows 'login attempts' to my device to be 'monitored', get stuffed, I'm not having that.
DroidBois said:
I have been hit with this ridiculous security policy too, my IT admin guy just shrugs his shoulders, and it doesn't seem to hit iPhones (which are hopeless for security anyway?).
So when I install .apk, do I then need to migrate my Exchange account to a new mail application?
I have a rooted phone, is there any way to just disable Exchange security policy? It even allows 'login attempts' to my device to be 'monitored', get stuffed, I'm not having that.
Click to expand...
Click to collapse
Not that I know of yet. Uninstall native email app. Use titanium bu. Clear security. Reboot. Install this one.
Sent from my PC36100 using XDA App
What is this app and how does it work? Is it a hacked native email app? Also, silly question perhaps, how do we know it's safe to use?
Native email ap, modded. Aosp, not sense. Click the link to original post in first thread for more info. I use this exclusively anytime I flash a new 2.2 rom.
Sent from my PC36100 using XDA App
How was it modded, is the native app open source?
How are you all going with this? I'm thinking of installing it. Does it still pull in and integrate the work calendar and contacts?
Yep, but non-sense style...
Sent from my PC36100 using XDA App
Bang3r said:
Yep, but non-sense style...
Sent from my PC36100 using XDA App
Click to expand...
Click to collapse
What do you mean non-sense style? It doesn't integrate with the Sense calendar and contacts?
DroidBois said:
What do you mean non-sense style? It doesn't integrate with the Sense calendar and contacts?
Click to expand...
Click to collapse
C'mon....Just give it a try already if you're interested. Don't delete the stock mail app just yet, but delete your credentials, and remove your security (password). Then install this one, see if you like it. I honestly don't remember if it syncs calender with with sense (but I don't think it does). Don't use sense. It is not a Sense app. Its AOSP-like.
Nothing to lose by trying it.
Yeah ok I'll give it a shot.. There are several versions of this app flying around in various threads, is the link in this thread the one to use?
All seem the same to me. Could be mult authors/modders though. I just found on another forum and posted it here.
Sent from my PC36100 using XDA App
Message deleted.
Sweet... working!
How can I get the email widget for unread message count? It does come with it.
pkmusic said:
How can I get the email widget for unread message count? It does come with it.
Click to expand...
Click to collapse
It depends. Is it a sense widget you're talking about? If so, this will not work. This is the native android email application, not the Sense version. As such, the Sense widget cannot "talk" to this application. There may be a widget on the market for that though.
Beautiful...works great. I can't begin to express how much this helps me out. Any way to change the colors in the email app?
Muchas Gracias
FYI..i'm a noob
Sigh, still getting connection errors when trying to d/l attachments >1MB in size. Otherwise it works fine.

[Q] Creating an app to...

Due to switching roms constantly and data wiping (i always like to start fresh, even without switching roms sometimes) there is always a lot to add back, some things which are tedious
basically i want to know if it would be a hassle to make an app do this:
add all the settings to set up my email
set up passwords for wifi networks i use a lot (home networks)
and a big one, install a certificate and set up the wifi to use on campus
my background:
outside of Matlab and Mathematica i know nothing about programming (if you can even consider those real programming languages?)
ive been interested in learning to program, mainly to accomplish personal tasks like these
would this be too 'difficult' to go after and tackle, where to start?
would the google appcreater be able to do something like this?
thanks =D
Titanium. Use it, Luke.
Sent from my HTC Desire using XDA App
it didnt save my email settings. tried it.
it also cant save a installed certificate. but thanks lol
gi812 said:
it didnt save my email settings. tried it.
it also cant save a installed certificate. but thanks lol
Click to expand...
Click to collapse
Email settings are saved, you' re doing it wrong. Don't know about the certs tho
Sent from my HTC Desire using XDA App
I agree. It saves emails. Best still to use k-9 as it saves that too. Just buy it as restoring in unpaid version is a pain in the ass
ickyboo said:
I agree. It saves emails. Best still to use k-9 as it saves that too. Just buy it as restoring in unpaid version is a pain in the ass
Click to expand...
Click to collapse
K-9 dev trying to sell his app?
Sent from my HTC Desire using XDA App

[FLASHABLE] Modified 2.1 Sense Email - No Device Administrator

I de-odexed and patched the Sense 2.1 Email APK (from MikG v1.01) so that Device administrator is not enforced. This means you can use whatever lock screen you want (if having one at all) and modify the timeout period.
I used edify scripting, so this should work on CWR or AmanRA
This may violate your company's EAS policy, so be careful. This is at your own risk!!!!!
Please nandroid backup first before applying. This deletes your Mail.apk/odex
It works only on sense roms or is for any rom?
aaanadie said:
It works only on sense roms or is for any rom?
Click to expand...
Click to collapse
this only works on Sense 2.1 based roms, such as MikG's
Which rom are you running?
adma84 said:
I de-odexed and patched the Sense 2.1 Email APK (from MikG v1.01) so that Device administrator is not enforced. This means you can use whatever lock screen you want (if having one at all) and modify the timeout period.
I used edify scripting, so this should work on CWR or AmanRA
This may violate your company's EAS policy, so be careful.
Click to expand...
Click to collapse
Can they detect it somehow?
Edit: Also, does it bypass the requirement to have encryption on the SD card and the phone itself?
lnchbx13 said:
Can they detect it somehow?
Edit: Also, does it bypass the requirement to have encryption on the SD card and the phone itself?
Click to expand...
Click to collapse
1. Not to my knowledge
2. No idea, my test EAS server didn't enforce that. But I think it would probably work
anyone tried it out yet?
cool. I will try it. Anyway to get the Sense 3.0 mail.apk the same way?
I'd love this. Any chance of un-allowing remote device wipe? I'd like to get my work email on my phone, but I'll be damned if I'm going to give them remote wipe ability on MY phone.
kippswanson said:
I'd love this. Any chance of un-allowing remote device wipe? I'd like to get my work email on my phone, but I'll be damned if I'm going to give them remote wipe ability on MY phone.
Click to expand...
Click to collapse
it's doable, but I don't have time to go through and find it though. Sorry!
adma84 said:
it's doable, but I don't have time to go through and find it though. Sorry!
Click to expand...
Click to collapse
It's cool. Thanks for this.
Your Exchange admins can run security scans to see if you're running a re-signed version of the app. So you have to ask yourself if it's worth risking whatever sort of reprimand you might get if you're caught. If you're that paranoid about getting remote wiped, then you should be equally paranoid about breaking security rules.
ZombieReagan said:
Your Exchange admins can run security scans to see if you're running a re-signed version of the app. So you have to ask yourself if it's worth risking whatever sort of reprimand you might get if you're caught. If you're that paranoid about getting remote wiped, then you should be equally paranoid about breaking security rules.
Click to expand...
Click to collapse
You are not always breaking the rules. For example, my EAS server has a timeout of 60 minutes before pin needs to be re-entered. However, Android Email timeout is MUCH shorter. Also, I have never heard that EAS admin can check that. The signature doesn't even remain after you flash it...so that makes no sense.
I will give this a try, but just a heads up, I used to use a different (stock, not HTC) modified email without the security, and my companies IT locked me out of my account because it didn't have the required security.
Will report back if this is the same deal...
awenthol said:
I will give this a try, but just a heads up, I used to use a different (stock, not HTC) modified email without the security, and my companies IT locked me out of my account because it didn't have the required security.
Will report back if this is the same deal...
Click to expand...
Click to collapse
wow! Well, as I stated in the first post, you do have to be careful and this is at your own risk! good luck!
Ran into some issues flashing (my fault) so won't get to mess with it today, yet.
adma84 said:
wow! Well, as I stated in the first post, you do have to be careful and this is at your own risk! good luck!
Click to expand...
Click to collapse
I believe the android mail.apk I used was modified to trick the server into thinking the auto-lock was enabled when it wasn't. Don't remember at this point, but all I know is I got a day or two out of it before they blocked my phone
Eh, their loss...no email following me around
awenthol said:
I will give this a try, but just a heads up, I used to use a different (stock, not HTC) modified email without the security, and my companies IT locked me out of my account because it didn't have the required security.
Will report back if this is the same deal...
Click to expand...
Click to collapse
also, they do check User-Agents of email clients. If your corp. accepted touchdown for example, or HTC, but not stock android...it wouldn't matter if it was patched or not. But just a thought
still looking from feedback from folks This will work on any version of MikG (or other Sense 2.1 based roms)
mind making one that will work with decks 2.3 rom?
heldunder said:
mind making one that will work with decks 2.3 rom?
Click to expand...
Click to collapse
Did you try this one? It will probably work
adma84 said:
Did you try this one? It will probably work
Click to expand...
Click to collapse
doesnt work
sorry about how long that took me lol
(at work so i was doing work while flashing it lol)

Stock ICS Email App - Exchange Included!

As promised, here are the files and instructions if needed to install the stock ICS Email app. You MUST have root!
To install the Stock ICS Email app:
1. Turn off Fast Boot! Root your phone!
2. Install ES File Explorer and under Root settings, enable Root Explorer and Mount File System.
3. Download attached EmailGoogle.apk and ExchangeGoogle.apk
4. Drop them into the System/App folder and reboot!
5. Setup your Exchange accounts and enjoy true PUSH EMAIL!
I recommend not using the Gmail email app and just setup your Gmail via Microsoft Exchange and add it to the stock ICS Email app.
Click to expand...
Click to collapse
Hmmm I'm not sure what I did wrong but I can't get it to work. I rooted my phone successfully, downloaded these two apks and dumped then in the app folder and restarted. But they don't seem to work. I keep getting "unfortunately email has stopped working"
Sent from my HTC One X using Tapatalk 2
Did you turn off fast boot?
Figured it out, I forgot to uncheck the mount button in the file viewer. Thanks!!
Sent from my HTC One X using Tapatalk 2
broseph23 said:
Figured it out, I forgot to uncheck the mount button in the file viewer. Thanks!!
Sent from my HTC One X using Tapatalk 2
Click to expand...
Click to collapse
You're welcome! Now click Thanks
I'm getting the same issue and I've made sure fastboot is off and unmounted the /system after.
Do I need to copy both to get exchange only?
Sent from my HTC One X using XDA
Amazing!
Thank you so much for this fix!
This push bug is a PITA. This a guaranteed fix for near instant push emails?
In order for this to work, do I have to clear out the data from the HTC Stock Mail app and disable it first?
will this allow me to finally see exchange in HTML? the stock sense email app doesnt support HTML in exchange running version 03.
The phone got sluggish after I installed this until I disabled the HTC email app.
A nice bonus this does is that it enables you to ignore your Exchange Security Policy.
guizzy said:
The phone got sluggish after I installed this until I disabled the HTC email app.
Click to expand...
Click to collapse
I had similar issues. You have to disable or at least clear data from anything else that uses Exchange. You can't have two mail apps using ActiveSync at the same time.
I disabled Gmail and the stock app, and uninstalled another mail I was using, then everything was fine.
Can't find the applications
Not really sure if i have done this correctly, but i have followed the instructions.
I have rooted the phone and dropped the files in system/app
But i can't find any new applications after rebooting. Trying to click on the .apk and install them the regular way doesn't help either (and probably shouldnt?)
I am fairly certain i have disabled fastboot but how can i be really sure of this?
I just installed this on my EVO 4G LTE and it works great! Figured I would give this a bump
guizzy said:
The phone got sluggish after I installed this until I disabled the HTC email app.
A nice bonus this does is that it enables you to ignore your Exchange Security Policy.
Click to expand...
Click to collapse
how do you disable the exchange security policy? i setup my exchange account but i dont see where you can disable this feature....
trant01 said:
how do you disable the exchange security policy? i setup my exchange account but i dont see where you can disable this feature....
Click to expand...
Click to collapse
Search for it. I believe I have seen it in the Android Themes and Apps Forum
Champman said:
Not really sure if i have done this correctly, but i have followed the instructions.
I have rooted the phone and dropped the files in system/app
But i can't find any new applications after rebooting. Trying to click on the .apk and install them the regular way doesn't help either (and probably shouldnt?)
I am fairly certain i have disabled fastboot but how can i be really sure of this?
Click to expand...
Click to collapse
II also have the same problem. No new email app after dropping them into system/app with Root Explorer. I have fast boot off and am running cleanrom 4.5.
Removed stock exchange/email apps?
Mount Write permissions? I use ES File Explorer. It's free so maybe try that instead...?
Itaintrite said:
II also have the same problem. No new email app after dropping them into system/app with Root Explorer. I have fast boot off and am running cleanrom 4.5.
Click to expand...
Click to collapse
Odd. I've never had any problems with that, and I have to copy the two apks back into system every time I upgrade CR. Did you try rebooting?
Attachment size limit is low
I have noticed that the attachment size limit is 5MB or less.
Kinda weak compared to stock.
Anyway to mod it to get a larger attachment size?

Hacked Email APK for Exchange Security

Can remove thread thanks for the Moxier Mail tip, I ended up using this for my mail instead. But really I never installed the correct version as I linked the OG version and I had already set a lock so basically I did nothing to the original setup and installed the one on the thread that was not modified.
Did you use the One X Energy apk or the Sense 4.0 apk?
Sent from my HTC One X using xda premium
wisconsindesi said:
Did you use the One X Energy apk or the Sense 4.0 apk?
Sent from my HTC One X using xda premium
Click to expand...
Click to collapse
this one worked for me on the att one xl. i've since learned that my personal email service provider (1and1) will remove this feature if requested.
cortez.i said:
this one worked for me on the att one xl. i've since learned that my personal email service provider (1and1) will remove this feature if requested.
Click to expand...
Click to collapse
Could not install it. Do I need to uninstall the old one first?
wisconsindesi said:
Could not install it. Do I need to uninstall the old one first?
Click to expand...
Click to collapse
you don't install this apk, you have to rename the file to Mail.apk and then push (copy) to /system/app, meaning replace the current Mail.apk file. to do this you have to be rooted. the instructions in the first post list the prerequisites and how to install on your device.
Sorry guys I thought I linked the post. Use the download on post 147. It will install ad the apk no need to push it to system
Sent from my HTC One X using XDA
mainecrab said:
Sorry guys I thought I linked the post. Use the download on post 147. It will install ad the apk no need to push it to system
Sent from my HTC One X using XDA
Click to expand...
Click to collapse
to clarify, the zip you're referring is a "pre-hack" version of the mail apk.
This is all fine and dandy, but WAY against the usage policies of any company that enforces that security. As an Exchange admin, and one that takes data security seriously, I would not hesitate to disable access and report that behavior to management. Most likely this would result in termination. I'm not trying to be a downer, but those that use this need to be aware of the consequences.
Another option is to use the extendlocktime app from the play store. Works perfectly.
Sent from my HTC One X using XDA
Nate731 said:
This is all fine and dandy, but WAY against the usage policies of any company that enforces that security. As an Exchange admin, and one that takes data security seriously, I would not hesitate to disable access and report that behavior to management. Most likely this would result in termination. I'm not trying to be a downer, but those that use this need to be aware of the consequences.
Click to expand...
Click to collapse
u're absolutely correct!! i don't use the hacked Mail.apk with my Corp/Company email, i use Moxier Mail. Moxier Mail has all the security features required by my company including PIN lock. my employer actually pays the license fee for employees that want to use it instead of the native mail applications. The BIG difference for me is that Moxier's PIN lock is applied to the application and not to the device itself.

Categories

Resources