Mobile Device Management - MDM - General Questions and Answers

well my company decided that company emails will work only under MDM. So today we tested this app on my mobile on BYOD mode as logical container.
https://www.manageengine.com/mobile-device-management/
And I am really not happy to what this app has access and I can't restrict it, because the access is enabled by admin of MDM. Please see attached screenshot.
the app has access to: camera, contacts, location, phone and storage and i can't block this access.
for contacts, phone and storage it looks like it has access only to folders in container (I hope, as i can't access my contact and documents from work profile). However accessing camera and location is not ok for me. Yes the admin of MDM app can see where i am in live and i can't block it. If I root the device the program will stop working, any other way how to prevent access to camera and location? Using oneplus 7T on Oxygen OS 10.0.15. Thinking about removing this app, but work email on the phone is almost must have for me.

wolfyy said:
well my company decided that company emails will work only under MDM. So today we tested this app on my mobile on BYOD mode as logical container.
https://www.manageengine.com/mobile-device-management/
And I am really not happy to what this app has access and I can't restrict it, because the access is enabled by admin of MDM. Please see attached screenshot.
the app has access to: camera, contacts, location, phone and storage and i can't block this access.
for contacts, phone and storage it looks like it has access only to folders in container (I hope, as i can't access my contact and documents from work profile). However accessing camera and location is not ok for me. Yes the admin of MDM app can see where i am in live and i can't block it. If I root the device the program will stop working, any other way how to prevent access to camera and location? Using oneplus 7T on Oxygen OS 10.0.15. Thinking about removing this app, but work email on the phone is almost must have for me.
Click to expand...
Click to collapse
Whenever a device is enrolled with MDM mobile device management solution, you do not have any control over it. Only an IT admin can make any changes to the device.
The IT admins configure the MDM agent on the device via the MDM server. This includes policy configuration, apps, and content push as well as security controls.

Related

[Q] Is there a way around Exchange email -no root- rule

My employer just opened up Android native email capability (to receive work email, calendar, apps) for my Note i717. Problem is, they won't allow Rooted devices.
I know there's several (6 I think) security certificates that get installed, but I was wondering if there's a way around this no-root rule.
1. If I unroot, get all certificates installed and then re-root will it nullify the certs?
2. Does anyone know enough about certs to answer if they're something that can be backed up and restored if I move to a different ROM in the future?
I've scoured the forum and have found info on bypassing the credential logins, but not pertaining to these questions above. Answers would be greatly appreciated.
It isn't really a rule...depending on your environment
b3furuya said:
My employer just opened up Android native email capability (to receive work email, calendar, apps) for my Note i717. Problem is, they won't allow Rooted devices.
I know there's several (6 I think) security certificates that get installed, but I was wondering if there's a way around this no-root rule.
1. If I unroot, get all certificates installed and then re-root will it nullify the certs?
2. Does anyone know enough about certs to answer if they're something that can be backed up and restored if I move to a different ROM in the future?
I've scoured the forum and have found info on bypassing the credential logins, but not pertaining to these questions above. Answers would be greatly appreciated.
Click to expand...
Click to collapse
Unless your company is using a type of MDM platform (Codeproof, Good, MobileIron, AppSense), they will not be able to detect that you have root access to your phone. Some companies instruct users to install a separate MDM application in order to access their email. Most Exchange servers can be connected to without installing the MDM software. If they don't force an MDM client, they won't know you are rooted.
Depending on the version of Exchange, you can use a 3rd party email app like K-9 to access the email which would also bypass the additional security policies that will be installed if you were using the built-in Exchange support. I use Touchdown, therefore the app is protected by a PIN but not my phone, so I can still unlock the phone without having to type a 6 digit number every, single, time.
The way I see it, the company's data is still protected, and I am not overly inconvenienced, it is a win-win.
Unless your company is using a type of MDM platform (Codeproof, Good, MobileIron, AppSense), they will not be able to detect that you have root access to your phone. Some companies instruct users to install a separate MDM application in order to access their email. Most Exchange servers can be connected to without installing the MDM software. If they don't force an MDM client, they won't know you are rooted.
Depending on the version of Exchange, you can use a 3rd party email app like K-9 to access the email which would also bypass the additional security policies that will be installed if you were using the built-in Exchange support. I use Touchdown, therefore the app is protected by a PIN but not my phone, so I can still unlock the phone without having to type a 6 digit number every, single, time.
The way I see it, the company's data is still protected, and I am not overly inconvenienced, it is a win-win.
Click to expand...
Click to collapse
Apologies, I did forget to mention they instruct to install Mobile-Iron.
Their process is such:
1. Install Mobile-Iron
2. Encrypt Device & set 6 digit pin
3. Install Certificates
4. Email configuration
5. Sync email, calendar, clients to phone
They do note "If your device is rooted, this process will not complete successfully."
Reviewing the steps, it looks like the whole process is done within Mobile-Iron.
No dice so far
Still can't find anything on the net for this. If anyone can help answer this I'd greatly appreciate it.
I'd love to be able to check on emails without having to open and boot my laptop. Also, it would be great to have my calendar sync so I don't miss meetings.

Is there no way to restrict folder access by app ?!

I'm currently using AFWall+ and Xprivacy to manage which app can access my data and which app can access the Internet.
I'm rooted and on CyanogenMod btw.
I basically just block Internet access for every apps and for those apps that really do require Internet access, I restrict what exactly these apps can access.
But there there are a couple of huge flaws in that system:
Let's say you install a hypothetical app to share your photos. That app needs Internet access and access to a folder containing your photos.
But there is no way to restrict access to just a single folder. You either grant access to your whole file system or you deny it completely.
So this app could easily spy on other things like your videos, music, confidential documents or whatever.
I know there are ways to secure folders with passwords, but when I put a password on my documents folder, my document reader won't be able to access that folder anymore.
Is there an app or Xposed module that I could use to simply specify which app can access which folders?
Hi,
I don't know if this Xposed module AppOpsXposed could be an answer for you.
AppOpsXposed just let's you change app permissions, as in "Storage access: Yes/No". The same can be done with Xprivacy more safely and it is not what I'm looking for at all. I basically want to be able to set permissions on a per-folder basis.

Encrypting All Outgoing Traffic

Hey there XDA
So I was reading this article the other day that pertains to security and encryption on the Android Operating System
http://www.bibliotecapleyades.net/sociopolitica/sociopol_cia38.htm
Basically what is says is that even if you use encryption in apps there's nothing preventing people from accessing your devices mic or camera
But I was thinking what if you encrypt ALL outgoing traffic? Now I'm not the most well versed guy when it comes to technology but I've heard about for example SSH tunnels
So I found this guide on how to setup one on Android: https://www.howtogeek.com/121698/how-to-route-all-your-android-traffic-through-a-secure-tunnel/
Would this effectively encrypt all outgoing data?
Eklondh said:
Hey there XDA
So I was reading this article the other day that pertains to security and encryption on the Android Operating System
http://www.bibliotecapleyades.net/sociopolitica/sociopol_cia38.htm
Basically what is says is that even if you use encryption in apps there's nothing preventing people from accessing your devices mic or camera
But I was thinking what if you encrypt ALL outgoing traffic? Now I'm not the most well versed guy when it comes to technology but I've heard about for example SSH tunnels
So I found this guide on how to setup one on Android: https://www.howtogeek.com/121698/how-to-route-all-your-android-traffic-through-a-secure-tunnel/
Would this effectively encrypt all outgoing data?
Click to expand...
Click to collapse
Not really, setting up an SSH tunnel will only encrypt your traffic between your device and your server, at some point most traffic will have to enter the internet in just as secure manner as it does now so that you can view a website for example, it will add another layer of security, but really only useful for privacy from those on your local network or (if your server is outside your ISP network) from your ISP also (but you'd have to change your DNS servers also or they can get info from there about sites you visit)
Also non of that will stop the issue you mention above about gaining access to your camera, mic, files etc that to beat encryption they just have to gain access to your phone, that could be as simple as sending you a malware link to your email, Whatsapp or whatever, which you visit. Which seems to be what my mum did 2 days ago, there was a well crafted email that appeared to be from Genes Reunited making specific reference to her personal private data & contacts in her account so she clicked the link, now she has no internet access & other issues on tablet, but of course I can't log in to fix from here & she can't follow my instructions over the phone properly! The email password she gave me doesn't work (I wanted to examine the file she clicked on), though there was no confirmation via txt of password changed. So right now I'm not sure as could be related to the TalkTalk hacks.... Or just my mum! Rant over!
So in short no, ssl is not a simple solution
this might help. https://www.torproject.org/
"err on the side of kindness"
IronRoo said:
Not really, setting up an SSH tunnel will only encrypt your traffic between your device and your server, at some point most traffic will have to enter the internet in just as secure manner as it does now so that you can view a website for example, it will add another layer of security, but really only useful for privacy from those on your local network or (if your server is outside your ISP network) from your ISP also (but you'd have to change your DNS servers also or they can get info from there about sites you visit)
Also non of that will stop the issue you mention above about gaining access to your camera, mic, files etc that to beat encryption they just have to gain access to your phone, that could be as simple as sending you a malware link to your email, Whatsapp or whatever, which you visit. Which seems to be what my mum did 2 days ago, there was a well crafted email that appeared to be from Genes Reunited making specific reference to her personal private data & contacts in her account so she clicked the link, now she has no internet access & other issues on tablet, but of course I can't log in to fix from here & she can't follow my instructions over the phone properly! The email password she gave me doesn't work (I wanted to examine the file she clicked on), though there was no confirmation via txt of password changed. So right now I'm not sure as could be related to the TalkTalk hacks.... Or just my mum! Rant over!
So in short no, ssl is not a simple solution
Click to expand...
Click to collapse
Heh, **** man.. Hope she sorts it out
Now I think I've decided to use an SSH tunnel paried with RSA authentication for the time being, it seems good enough for me
mrrocketdog said:
this might help. https://www.torproject.org/
"err on the side of kindness"
Click to expand...
Click to collapse
Tor seems awesome
The proper way to achieve this is using a vpn which permits flexibility on the networking side. I use openvpn server on my home computer and i connect my phones to it. It is set to redirect all traffic through the encrypted tunnel which is forwarded to the internet through my home computer.
Now as noted before the information still goes out to the net at some point and comes back. Encrypting traffic does not help if you click on something malicious out there.
It does help to prevent the directly connected network to snoop on your actual traffic though. Handy when you connect to free wifi etc. Also you can filter traffic by application on the phone or by destination on the other side on the server.

How to block internet connections for specific apps?

Hi, I have a Samsung Galaxy S8+ which I purchased 3 or 4 months ago but I have never used it.
The device has been stored in a drawer because the first time I logged in I could not find a way to block Internet access for specific applications.
Now I would like to start using the device, but only if I can block Internet access (mobile data AND Wi-Fi) for specific applications.
I do not want to allow Internet access to applications like Contacts, Messages, Goople Play Store, Google Play Services, Gallery, etc., etc., etc.
So the question is:
How can I block Internet access (both mobile data and Wi-Fi) to all the applications I choose to? I am not talking about third party apps like firewalls... I want to block Internet access using the built-in (stock) apps/features/whatever... I mean by making use of the options that the device has by default.
Thanks in advance!
No there's no way to limit one app from getting to the Internet built into the phone. You could turn off the sync settings for some of them like Contacts, Gallery, etc.
I have to ask, why does it matter if those apps can get to the Internet? I mean how do you expect to install apps if you were able to block the Play Store?
Un-sync is the only thing you can do, https://play.google.com/store/apps/details?id=eu.faircode.netguard&hl=en is the other option.
What do you mean you can't? What about adhell2? As far as I know, it has internet permission for individual apps, and it doesn't need root...?
mjones73 said:
No there's no way to limit one app from getting to the Internet built into the phone. You could turn off the sync settings for some of them like Contacts, Gallery, etc.
I have to ask, why does it matter if those apps can get to the Internet? I mean how do you expect to install apps if you were able to block the Play Store?
Click to expand...
Click to collapse
Many of those apps have permissions like "storage", "phone ID", "contacts", "calendar", "camera", "microphone", etc...
Therefore, when those applications are given Internet access they will be able to send all our data via the Internet ...
That's why it's so important to block them having Internet access.
For example, if an application has access to your data, to your storage or your contacts, it stands to reason that it should not have Internet access...
Google or any other companies are not my tutor or my parents (I'm old enough to have grand children). They should not have, simultaneously, access to my storage data, contacts, calendar, and Internet access to send out all those data and info...
My son has a Huawei P10 and that device allows the user to block Internet access to specific apps.
So if this Samsung device does not have a way to limit specific apps from getting to the Internet, then the phone is a spyware device...
With the due respect, only a completly fool would use such a compromised device.
Note: my biggest problem is not Google Play Store because it's an app which I could use without allowing permissions like "storage", "contacts", and such. But I don't use Google Play Store. I use F-Droid and (if needed) Yalp Store.
Niccolò Paganini said:
Many of those apps have permissions like "storage", "phone ID", "contacts", "calendar", "camera", "microphone", etc...
Therefore, when those applications are given Internet access they will be able to send all our data via the Internet ...
That's why it's so important to block them having Internet access.
For example, if an application has access to your data, to your storage or your contacts, it stands to reason that it should not have Internet access...
Google or any other companies are not my tutor or my parents (I'm old enough to have grand children). They should not have, simultaneously, access to my storage data, contacts, calendar, and Internet access to send out all those data and info...
My son has a Huawei P10 and that device allows the user to block Internet access to specific apps.
So if this Samsung device does not have a way to limit specific apps from getting to the Internet, then the phone is a spyware device...
With the due respect, only a completly fool would use such a compromised device.
Note: my biggest problem is not Google Play Store because it's an app which I could use without allowing permissions like "storage", "contacts", and such. But I don't use Google Play Store. I use F-Droid and (if needed) Yalp Store.
Click to expand...
Click to collapse
I was gonna say maybe use tinfoil around your phone . If you decide you want to use internet on a specific app remove the foil. But IDK if it'll work though.
dalanik said:
What do you mean you can't? What about adhell2? As far as I know, it has internet permission for individual apps, and it doesn't need root...?
Click to expand...
Click to collapse
Hmm i'll have to look into that.
eddyo1993 said:
I was gonna say maybe use tinfoil around your phone . If you decide you want to use internet on a specific app remove the foil. But IDK if it'll work though.
Click to expand...
Click to collapse
Couldn't he just keep the phone in his tinfoil hat?
Mr. Orange 645 said:
Couldn't he just keep the phone in his tinfoil hat?
Click to expand...
Click to collapse
Yes he can. He can call it a phone accessory.
Take a look at "Datally: mobile data-saving & WiFi app by Google"
https://play.google.com/store/apps/details?id=com.google.android.apps.freighter
Sent from my SM-G955F using Tapatalk
gesbon said:
Take a look at "Datally: mobile data-saving & WiFi app by Google"
https://play.google.com/store/apps/details?id=com.google.android.apps.freighter
Sent from my SM-G955F using Tapatalk
Click to expand...
Click to collapse
If Datally allows control that'd be great. You can control an apps permissions, but none are directly internet.
Niccolò Paganini said:
Many of those apps have permissions like "storage", "phone ID", "contacts", "calendar", "camera", "microphone", etc...
Therefore, when those applications are given Internet access they will be able to send all our data via the Internet ...
That's why it's so important to block them having Internet access.
For example, if an application has access to your data, to your storage or your contacts, it stands to reason that it should not have Internet access...
Google or any other companies are not my tutor or my parents (I'm old enough to have grand children). They should not have, simultaneously, access to my storage data, contacts, calendar, and Internet access to send out all those data and info...
My son has a Huawei P10 and that device allows the user to block Internet access to specific apps.
So if this Samsung device does not have a way to limit specific apps from getting to the Internet, then the phone is a spyware device...
With the due respect, only a completly fool would use such a compromised device.
Note: my biggest problem is not Google Play Store because it's an app which I could use without allowing permissions like "storage", "contacts", and such. But I don't use Google Play Store. I use F-Droid and (if needed) Yalp Store.
Click to expand...
Click to collapse
I guess I'm a fool because I don't care if Google is syncing my data so I could also get to it from my account via my PC..
Maybe you should stick to a Huawei P10 or a flip phone I guess...
Funniest thing ever!! He is complaining that his son can block internet access on his Huawei device, and then complains that his Samsung cannot due the same and therefore is a spyware device. EVEN THOUGH HUAWEI HAS BEEN PROVEN TO BE SPYING ON US CITIZENS BY THE FBI!! Like if u actually cared about your privacy you would stick with Samsung and stay far far away from Huawei
If you have root, use any firewall app available on Playstore such as AFWall+ or Droid Firewall
Niccolò Paganini said:
Many of those apps have permissions like "storage", "phone ID", "contacts", "calendar", "camera", "microphone", etc...
Therefore, when those applications are given Internet access they will be able to send all our data via the Internet ...
That's why it's so important to block them having Internet access.
For example, if an application has access to your data, to your storage or your contacts, it stands to reason that it should not have Internet access...
Google or any other companies are not my tutor or my parents (I'm old enough to have grand children). They should not have, simultaneously, access to my storage data, contacts, calendar, and Internet access to send out all those data and info...
My son has a Huawei P10 and that device allows the user to block Internet access to specific apps.
So if this Samsung device does not have a way to limit specific apps from getting to the Internet, then the phone is a spyware device...
With the due respect, only a completly fool would use such a compromised device.
Note: my biggest problem is not Google Play Store because it's an app which I could use without allowing permissions like "storage", "contacts", and such. But I don't use Google Play Store. I use F-Droid and (if needed) Yalp Store.
Click to expand...
Click to collapse
Hello, i have same concerns with you. Have you find solution to this problem ?
Stock Samsung Apps like samsung music, calendar, camera etc. sending information to internet. I don't want this.
I used to use lineage os before, and this process was so simple. But now i have a s10e. I can't block internet access per apps.
Jail break your phone for true control (definitely worth it), everything you need to know is online. Tin foil ???
Found any solutions? I'd really be happy to find a way to do this without rooting my s10e.
And if you're only solution is still tin foil and think it doesn't make any sense, buy yourself a brain before answering please.
Kojackk said:
Found any solutions? I'd really be happy to find a way to do this without rooting my s10e.
Click to expand...
Click to collapse
Grab Activity Launcher on the Play Store (the one by Adam Szalkowski) and search for "Manage App Data. You can restrict access to mobile data and wifi on a per-app basis.

[APP][6.0+] Remote Fingerprint Unlock - unlock your Windows PC with your fingerprint

Hello guys!
Tired of typing your password each time you want to unlock your computer?
After months of work, I have finally launched my project, Remote Fingerprint Unlock, which allows you to remotely wake up and unlock your Windows computer with a single fingerprint tap!
Features:
• Simple, user-friendly UI
• Secure
• Local/Microsoft/Domain** accounts supported
• 3 app themes - Light, Dark, Black (AMOLED)
• Wi-Fi/Bluetooth/Wi-Fi Tethering support
**1.2.0 version of the Windows module required. Usage: when adding an account using the Android app, simply add the full name of the account, including the domain, separated by a slash ( ‘\’ ). For example: test\account.name
PRO features:
• Ads removal
• Unlimited computers and account per computer
• Wake-On-Lan
• Unlock widgets - can be linked to any account, useful if you have more computers that you want to unlock
• Launcher shortcuts - same as widgets, can be used by long-tapping the app icon or can be pinned like any other launcher shortcut
• More planned features
With that being said, here is the link to the app: Google Play or XDA Labs
The Windows module, found at http://bit.ly/2Q4YoUP is required for the app to work. Please be sure to check for updates from time to time as they can contain fixes and add new features. The changelog can be found at the same link.
The app was featured on XDA News, thanks to the guys at XDA! :highfive: So, if you think that you need such a tool, be sure to give it a try!
Lastly, any question that you may have, be it about how the app works, how to use it or if you are just leaving feedback, don't hesitate posting it here! Thanks for taking the time to check the app!
Security
The communication between modules is secured using TLS (SSL). The accounts are stored on your computer as they are required when unlocking. However, they are encrypted using a key that is generated based on your fingerprint. As per this article, the generated key is backed by a Trusted Execution Environment, which prevents an attacker from gaining access to the key even if he had compromised the kernel. In other words, only the enrolled fingerprints on your phone can access the key. If you do uninstall, reset your app or even if you change one of your registered fingerprints, the file where the accounts are stored is lost forever and you will need to reconfigure your accounts.
Lastly, research has been done to ensure that, even locally, your accounts are as safe as possible. No password is stored in-app and everything is done locally (between the app and the Windows module) and I'm not, in any way, shape or form, sending through the Internet or seeing anything that you type in-app.
Basic troubleshooting
If you cannot find you computer in the Scan menu, please check the following:
Be sure that the module is present on your logon screen. For example, on Windows 10, you should see it on the lower left corner of the screen. If you installed the program and it still isn’t present, please leave a reply, send me a PM or an email.
If you have a different firewall than Windows Firewall, please be sure that you have allowed all incoming and outgoing traffic on both TCP and UDP for LogonUI.exe process, found in C:\Windows\System32.
Be sure that both your computer and your smartphone are connected to the same network which assigns IP addresses on the same subnet. For example, both devices should have an IP starting with the same subnet prefix: 192.168.1.
If you have blocked ports on your network, be sure to allow port 4009 on both TCP and UDP for the app to function correctly.
If you added an account but unlocking does not work, please check the following:
If you are using a Microsoft account: if you tried adding an account, used your email address and it does not work, please update the Windows module to at least 1.0.2, which supports logging in a user using the displayed account name on the lockscreen. When adding an account in-app, try again by using the displayed name of that Microsoft account (the First and Last names).
If you are using a local account on Windows Vista or 7, you may have changed your account name in the past. Internally, Windows does not change the username so you need to type in the original username.
If you can’t remember it, just open a Command Prompt and type 'whoami’. The username that will be displayed is the one that the app will need.
You can also check how your personal user folder is called. It can be found in C:\Users.
On Windows 8 and 10, have at least the 1.0.2 version installed and simply add an account using the displayed name on the lockscreen.
Setting up/Testing Wake On Lan (PRO feature)
To enable WoL on your computer, you can follow the steps here. To enable WoL on your computer, follow the first part. After that, you can continue with the same tutorial if you have another computer available, or you can download this app on your Android phone to test it.
To send the WoL signal using the app, simply go to the saved computers, tap on the desired computer, tick Send WoL-Packet and Save. There is no need to configure anything as your MAC address is automatically detected when you add your computer. The wake-up signal will now be sent each time you unlock one of the accounts on that PC.
Take into consideration that on some computers, you may also need to enable WoL in your BIOS settings and that it may work only on certain states like being fully shut down, hibernated or sleeping. There is nothing I can do about it, unfortunately, as it depends on your PC. Thanks for understanding!
So the fingerprint is saved on your server? How can we make sure that it will not be exploited?
scissorscrush said:
So the fingerprint is saved on your server? How can we make sure that it will not be exploited?
Click to expand...
Click to collapse
No! Actually it is not! The fingerprint verification is only done locally using only your phone's secure hardware. This is all that Android Fingerprint API's allow a developer to do: they just report back if a scanned fingerprint is found on a phone's system or not and the unique key that is generated when you first scan your fingerprint can be accessed only if there was a successful fingerprint scan.
So all of this part is done using Android's Fingerprint API. There is no back-end involved in any of this. With the exception of crash logs and ads, the Android app and the Windows module only communicate with each other.
Hope that it clarifies some of the aspects! Feel free to reply back if you have any other questions.
Andrew-X said:
No! Actually it is not! The fingerprint verification is only done locally using only your phone's secure hardware. This is all that Android Fingerprint API's allow a developer to do: they just report back if a scanned fingerprint is found on a phone's system or not and the unique key that is generated when you first scan your fingerprint can be accessed only if there was a successful fingerprint scan.
So all of this part is done using Android's Fingerprint API. There is no back-end involved in any of this. With the exception of crash logs and ads, the Android app and the Windows module only communicate with each other.
Hope that it clarifies some of the aspects! Feel free to reply back if you have any other questions.
Click to expand...
Click to collapse
Good dude. Gonna try it now and will report back ?
Unsuccessful. Could not add the account. Tried both pin and password.
scissorscrush said:
Unsuccessful. Could not add the account. Tried both pin and password.
Click to expand...
Click to collapse
Sorry to hear that. You can't add an account in-app or you can add it but it does not unlock your computer? Also, are you using a Microsoft account or have you changed you account username sometime in the past?
Andrew-X said:
Sorry to hear that. You can't add an account in-app or you can add it but it does not unlock your computer? Also, are you using a Microsoft account or have you changed you account username sometime in the past?
Click to expand...
Click to collapse
Can't add the account in the app. When I fill the details (account and password) it disappears and I get a notification up top that the command is sent, waiting for computer to reply. But nothing appears in the account list within the app. Using a local account (admin) and no changes in the past 2 years.
scissorscrush said:
Can't add the account in the app. When I fill the details (account and password) it disappears and I get a notification up top that the command is sent, waiting for computer to reply. But nothing appears in the account list within the app. Using a local account (admin) and no changes in the past 2 years.
Click to expand...
Click to collapse
Ok, just to be sure. Is your computer locked (not on the desktop, but on the login screen) when you are trying to add an account?
Edit: oh, yeah. That notification does not affect the adding operation, but it should not appear when adding an account. Thanks for helping me discover a little bug, lol
Andrew-X said:
Ok, just to be sure. Is your computer locked (not on the desktop, but on the login screen) when you are trying to add an account?
Edit: oh, yeah. That notification does not affect the adding operation, but it should not appear when adding an account. Thanks for helping me discover a little bug, lol
Click to expand...
Click to collapse
Lol looks like you got some work to do ?
scissorscrush said:
Lol looks like you got some work to do
Click to expand...
Click to collapse
Already solved it But have you managed to add your account? If not, have you added the firewall exceptions for the LogonUI.exe process? (If you are using something else than Windows Firewall)
Andrew-X said:
Already solved it But have you managed to add your account? If not, have you added the firewall exceptions for the LogonUI.exe process? (If you are using something else than Windows Firewall)
Click to expand...
Click to collapse
Sadly no. The firewall exceptions were created properly. The lock screen was on. No Antivirus on either devices. It might not be a firewall issue because the app was able to communicate with the computer.
Can't find my PC windows 10 in scan. No firewall in the computer, should i enable bluetooth in both devices or what??
spring80 said:
Can't find my PC windows 10 in scan. No firewall in the computer, should i enable bluetooth in both devices or what??
Click to expand...
Click to collapse
It only works on local networks (Wi-Fi/Wired) at the moment, so both your Android device and your computer should be on the same network to communicate with each other.
Also, do you have your computer on it's lockscreen when scanning? (not on dekstop)
Andrew-X said:
It only works on local networks (Wi-Fi/Wired) at the moment, so both your Android device and your computer should be on the same network to communicate with each other.
Also, do you have your computer on it's lockscreen when scanning? (not on dekstop)
Click to expand...
Click to collapse
Yes it is on lockscreen when scanning, i have main firewall in our network, so which port should i open in this firewall??
spring80 said:
Yes it is on lockscreen when scanning, i have main firewall in our network, so which port should i open in this firewall??
Click to expand...
Click to collapse
Open up 4009 on both TCP and UDP and also allow both incoming and outgoing traffic. Tell me if it worked.
When i use home wireless network (no main firewall), it is working, but inside my work network which have main firewall, it is not working. I already open port 4009 (tcp/udp),same result
spring80 said:
When i use home wireless network (no main firewall), it is working, but inside my work network which have main firewall, it is not working. I already open port 4009 (tcp/udp),same result
Click to expand...
Click to collapse
Can you please check what IP's are your computer and your given when connected to your work network?
Glad to see this thread here, OP. Will try this out and cover on XDA ?
working here flawlessly ..
For a first version finding an option to activate the dark mode surprised me. Thank you
Andrew-X said:
Can you please check what IP's are your computer and your given when connected to your work network?
Click to expand...
Click to collapse
The both IPs are in same network, my mobile and my pc, problem from my main network firewall, if i use different network (without firewall), it is working. By the way i am using Kerio control as my main network firewall

Categories

Resources