yashsingh1/xdaforums huggingface dataset:
[Android General] badgcoupe:
Yea, for those interested it appears the workaround for now is to not upgrade and/or restore the older version from backup.

So I'm pretty new to the Android world. How does one get in touch with developers of apps like superuser to request features/patches? Is it like the iPhone world where you have to search IRC to get to them?
[Android General] digitalwok:
Its gets worst than that...I had an verizon GS3 running JellWiz RL13 and completely removed root (installed using superSU). MobileIron was able to detect that my phone was unlocked which disabled mail. The actually status of the phone states "device unlocked, OS compromised"

Also, the problem with using the older version is that it will force the update soon or later or device will be disabled again. My 2 options are

1. Going back to stock

2. Outlook Web Mobile

I would rather have hobbled mail vs hobbled device...besides its only work mail and now I do not need to run MI which slows everything down. Does anyone know of something better than #2 that just uses HTTP. I found other options (Mobimail and DavMail) but they use EWS (Exchange web services) which most companies that deploy MI would also disable EWS. However, I would still check it out as your Exchange admin could have forgot to disable :)
[Android General] makelegs:
You pretty sufficiently described my experience with MI. Now running stock note 2 because of it.
[Android General] isja693:
Could I ask for your help

Could you send me a dropbox link or the apk to the email address below of the old version of mobile iron, I blew away my backups and cannot get around this rooting issue. I would be so greatful.

isja693@gmail.com
[Android General] isja693:
Help pretty pease

If anyone could please send me an old copy of mobileiron would be much appriciated, I blew away my appmonster backups to reclaim some space and sure enough I finally have a reason to install and old copy and cannot find it anywhere on the web. Please send me a dropbox share or just an email with the APK will help me and some of my buddies at work. Thanks again for your time.

isja693@gmail.com
[Android General] malgrep:
App detection

One thing to note about MobileIron is that it can read the apps installed on the device. So if an admin sees that you have HideMyRoot installed, they can set an app control rule to block mail.
[Android General] Jugger naut:
In hopes of the saying"even a blind squirrel finds a nut every once and a while" being true here is a shot in the dark.

Could dual booting be utilized in a way that would help? I did a search and found nothing, maybe that should have been a clue lol
[Android General] reggaetondon:
no problemo sent!!
[Android General] lee paul:
Would you pls send me the same..

thanks

sreeus2k@gmail.com
[Android General] walletless:
Anyone tried this with MaaS360? My employer uses MaaS360, not MobileIron to enforce these policies, and it does not allow syncing emails for rooted phone..
[Android General] NotBillable:
I just purchased an S2X because my Nexus cracked.

Im trying to get MI to authenticate with Touchdown on the new phone which is rooted and unlocked, and am getting no luck.

Can someone please post an older version of MI that is known to work. Would be much appreciated.

thanks in advance.
[Android General] NotBillable:
So the only way to resolve this was to, after rooting and doing whatever I need to do, I did a permanent Unroot with SuperSU.

MI and Touchdown worked after that....
[Android General] malgrep:
It seems with the later versions of the Mobileiron client, they added a few things to aid in root detection. It will look for other apps associated with the device being rooted (Titanium, ROM Manager, and possible a few others) will cause the VSP to mark it as compromised.
[Android General] galakanokis:
I've tried everything to be able to run a rooted device and the mobile iron connection with no joy. MI detects any apps that ask for root. The best I could do was set up the phone the way I want, usually with the CM nightlies, delete all root apps and then run the unroot zip from the tool kit. Get most if not all of the ROM joy just minus the root apps.

G
[Android General] simulacra:
I used the ICS method on my LG Optimus G (E970) running Jelly Bean with a few modifications and it worked beautifully. I now have access to my corporate email using TouchDown and Mobileiron AND root! :good::good::good:

Requirements For ICS JB:

1. Rooted Android Phone running ICS JB based ROM

2. Titanium Backup App Quarantine (app installed)

3. Hide my Root Temp Root Remover (app installed)

4. Mobileiron (app installed but never run)

5. Touchdown (app installed but never run)

Instructions for ICS JB:

0. Make a Nandroid backup

1. Open Temp Root Remover

2. Choose Un-Root /system/xbin

3. Open SuperSU

4. Choose Settings

5. Un-check Enable Superuser

6. Now open mobileiron and configure the settings per your company's instruction.

7. Set up your email in the Touchdown application and let it sync everything.

8. Open Temp Root Remover and choose Root /system/xbin

9. Go back SuperSU and choose Settings and check Enable Superuser

10. Open App Quarantine

11. Select MobileIron and click the lock icon (it's in the upper right corner)

12. Profit
[Android General] galakanokis:
I was able to get mobile iron/touchdown running and syncing with my corporate exchange by doing the following.

1)I had Mobile Iron and Touchdown installed and fully working on an unrooted ROM (no root or root apps).

2)Rooted my phone and did a Titanium backup of all apps.

3)Booted to recovery and did a factory reset. I installed a new ROM/kernel but I think that is anecdotal.

4)Once booted into the ROM I restored all apps and data from Titanium back up.

5)At this point I did nothing special and when I checked Touchdown was syncing with my server. I did notice that Mobile Iron was unchecked under security/device administrators though.

That's it. This was 4 or 5 days ago and I have changed ROM's a few times with the same results. I run fully rooted with all my assortment of root apps as well and I have had no issues with push notifications.
[Android General] scirio:
My corporate setup is uses the Airwatch backend and the Touchdown client for email/cal. Here's what worked for me on the first try.

What I had:

Rooted SGS3 on Liquid Smooth 2.2 Stable ROM

Airwatch app installed and enrolled - was throwing the Device Compromised error and so wouldn't sync with work at all beyond enrolling (AKA logging in)

What I did that worked:

Installed App Quarantine

Installed Temp Root Remov

Opened Temp Unroot and selected Un-Root /system/xbin

Opened System Settings > Superuser > Menu > Settings > Superuser Access = Disabled

Rebooted

Opened Airwatch and let the sync complete - Success! no errors. (prompts to install Touchdown, completed the install setup etc.)

Opened App Quarantine and quarantined Airwatch.

Restored root w/ Temp Root Remov

And email is syncing without issue.
[Android General] MrSimmonsSr:
Just wondering if this setup continued to work or if Mobile Iron eventually disabled your email?

About to try something similar myself. Don't really care about having root in the long run, but sure do hate having to run the stock AT&T build.. Yuck!

Let us know if you're still in good shape, please..

Thanks!

MrSimmonsSr
[Android General] galakanokis:
Apparently XDA emails you when someone quotes you now. Not sure how I signed up for that.

Yes, everything is still working fine for me. Mobile Iron seems none the wiser and Touchdown works great, no issues.

What I did initially was run a custom ROM (CM at the time) and used the unrooted flash from the Galaxy Nexus toolkit. Ran that way for a month or so until I wanted to start playing with scripts.

G man
[Android General] jcrompton:
I am trying to install my corporate email on my Note 2 and whenever I try to setup MobileIron I get an error stating that the email client can't be found even though email.apk and exchange.apk are installed properly. Do you have any ideas about this ??

What device did you use MobileIron and CM on? I can't seem to get Mobile Iron to recognize my email client for anything but stock ROMs.

Also I had never had any problems before with my rooted Note 2 using a stock rom and having Samsung email client but now when I try to activate my corporate account i get an error that states "unable to upgrade account" when trying to setup the email account. Is this because of root? I tried temporary unroot with SuperSU but got the same result. Any ideas?
[Android General] makelegs:
I use touchdown with mobile iron, as opposed to the stock email app. In fact mobile iron installs touchdown. Try that.
[Android General] Ipse_Tase:
Late to the game but I'm fed up with web access to my corp email...I tried your method up to the point where MobileIron wants to encrypt the phone content - and AFAIK this is a one way street.

Did you guys allow it to encrypt the phone knowing you will freeze the app afterwards?

I chickened out....

Any feedback appreciated.
[Android General] makelegs:
Fwiw...Encryption is NOT a one way street. Depending on your device, some versions of TWRP even support encryption. It's much less of a PITA, now, than it used to be. Unfortunately, mobileiron is also smarter than it used to be, too. I gave up and new use a stock device for work. Meh...
[Android General] simulacra:
Initially, I let MI encrypt my phone, but since then I've flashed several other ROMs and am using galakanokis' method of backing up and restoring Touchdown using Titanium Backup.
[Android General] galakanokis:
I had to use Touchdown as the Nexus native exchange email is not supported by mobile iron. That would include custom ROM's as well I think. From what I remember true Samsung ROM's will have the proper security in place if not on Samsung stock you will need touchdown or something similar.

I'm guessing root is the issue with not being able to setup.

G man

---------- Post added at 10:34 PM ---------- Previous post was at 10:32 PM ----------

I never got to the option or was never prompted to encrypt my phone. I cannot help much sorry.

I've got an GSIII to play with tomorrow and I will try the same steps to get touchdown working and than root access and let you know what happens.

G man
[Android General] jcrompton:
This whole process is weird .. in that I was able to talk to the IT guy for our group yesterday.

I confirmed that Touchdown did work nicely for an AOSP based ROM where the stock email client was not recognized. I installed Touchdown for Smartphones first and according to the IT guy MobileIron just supplies the Reg Key for Touchdown during the subsequent MobileIron setup.

I was after install able to freeze MobileIron.

Our corporate IT guys said that install didn't get effected by root ( he knows my phone is rooted)
[Android General] makelegs:
I'm pretty sure mobile iron can be setup to be more or less aggressive. MI knows if your phone is rooted. If your IT sets policy to block rooted phones, then you are guaranteed to get blocked at some point. I think it just depends on whoever makes those IT decisions, and how vigilant they are with enforcing policies.

In your case, it sounds like IT is fine with your root, but still wants to be able to remote wipe. Consider yourself lucky!
[Android General] galakanokis:
That is weird. I am playing with an out of the box 4.1.1 S3 and I could not get corporate email to setup with an that required root. Had to get rid of all my apps that look for root (just restored my account from my Nexus)

Will root today or tomorrow and see how it goes.

Danm it. Could not get the S3 to work. I couldn't even get it to work with stock ROM unrooted (after rooting) and a custom recovery. I had to flash a stock recovery to get email working again. Perhaps it has something to do with Samsung software. Will flash CM or Slim and try again tomorrow.
[Android General] buppie:
MobileIron admin here.

It is true that MI can be customized for more or less aggressive policies depending on how your IT departments wants to handle things. For example...we have different policies for company-owned and employee-owned devices. Employee devices have less security restrictions because they have less access to corporate resources (wifi).

MI can be configured to automatically block access to company email and resources if root access is detected (labeled as "OS Compromised"). This setting is optional and at the discretion of your IT dept. However I have yet to find a way to turn off this flag. Even if no action is taken, the MI admins will see that you have root. I know this because my gnex running CM 10.1 nightlies is the only rooted device in the company.

Luckily I am not required to take action against my own phone :)
[Android General] makelegs:
Since you showed up, here....what determines whether or not MI requires a phone to be encrypted? My gnex had to be encrypted, but not my stock note 2. Does that have something to do with Samsung's "enterprise ready" feature, on their newer devices, or something?

Thanks for any clarification. As you can see, MI has been a thorn in our side. ;)
[Android General] buppie:
Encryption is controlled by groups, not by device. It sounds like your devices were having different security policies applied for some reason (maybe one was registered as a company owned device by accident?)

MI can require that the device storage is encrypted or that the SD card is, or both. We do not have encryption policies enforced so i have never had to do it.

I don't believe it is related to the Samsung Safe (or whatever its called) features. When my gnex was stock it required Touchdown, but nothing more. (havent tested since i put CM on it...i like touchdown)

Hope that helps.
[Android General] makelegs:
Interesting....my gnex is "company" on vzw, but my note 2 is personal on TMO. Hard to believe a policy would draw a distinction between the 2. MI wants to use touchdown in both cases, which I'm fine with. It's a curious thing....meh
[Android General] buppie:
I would assume they provide more access to the Company owned devices...things like wifi profiles, apps they push, etc. More concerns if they were to get lost/stolen.

Cant say for sure, but that's my best guess.
[Android General] galakanokis:
Appreciate you pooping by buppie, interesting info. I am still running an unrooted version of Slim which works but it just doesn't feel right;)

What is the worry with root on mobile devices anyways? What is it that IT is trying to prevent?
[Android General] buppie:
Here is MI's explanation:

Why is jailbreak and root detection important?

To jailbreak (or root) a phone circumvents the built-in security and protection of the operating system, opening up the phone to malware and unsupported uses. Jailbroken devices also allow any application to be installed on the phone and malicious applications to steal contacts and corporate data.

Now i am obviously not saying i necessarily agree with their stance on the issue. I can only assume that the thought is that sensitive corporate data would be more likely to be stolen from a rooted device with some kind of app that needs root.

Like i mentioned, security in Mobileiron is controlled by groups, so you can (as we have chosen to) be more strict on company owned devices. If we give you a phone, we expect it to be primarily a method that we can contact you through. As such we prefer our phones are kept stock and free of any apps that we deem a potential security risk.

Employee owned devices are not subject to the same ruleset. While i can't seem to turn off root detection in MI, i dont have to act on it. We generally don't care what you do with your BYOD. We can cut off access to email if a device is lost or stolen (or employee is terminated) but that is pretty much all we use it for in this scenario.

Cant speak for others that use MI, but for our purposes it works well.
[Android General] galakanokis:
Understood. Makes sense to a degree but I don't necessarily agree as well. I am glad MI exist for Android or else I am still on a crapyy Bold or even worse and iPhone....
[Android General] makelegs:
Ha...nevermind that root/power users are more likely to be app-security conscious.
[Android General] buppie:
I couldn't agree more. I don't worry about the power users.
[Android General] makelegs:
If only my IT admins felt the same! ...meh

I may very well look you up from time to time as they continue to complicate my world
[Android General] dmichael:
disable root in CM 10.1

Is it possible to completely disable root in CM10.1? I don't really need root access in daily use but I have giving up a custom rom for one filled with Verizon crapware.
[Android General] galakanokis:
Should be able to. I grabbed an unroot zip from the toolkit of my respective phones and just flash it after flashing ROMs/kernels. You will also have to remove root apps like Titanium and Root Explorer. Currently running Slim 5.5 on my S3 unrooted .
[Android General] dmichael:
Thanks, I am currently waiting for my new phone to arrive but once it does I will give this a try.
[Android General] zarkoor:
one million thank u

Man, ur way worked like a charm with Airwatch

Now I have to figure out how to find a way to remove the forced password policy (the device is already encrypted as it was mandatory by Airwatch to allow enrolling the device in the first place)

but seeing Airwatch locked in quarantine is a real achievement

thanks man again
[Android General] tonymy01:
Would you like to contribute how?

p.s My work got this junk too a couple of months ago, and I lost all my data, including 12G internal & 64G external SD due to encryption (the encryption worked actually, if you ignore the shocking battery life the poor Note2 had, but I went to do a Samsung software update & re-root, and phone booted up asking for p/w, didn't accept normal password and thru recovery it seems the data partition, presumably encrypted before, was not determined by the rooting and/or upgrade software that it was encrypted and it just contained a couple of files).

If anyone knows how to access my files on the external SD (filenames weren't encrypted but all file contents are) with a known password, let me know! I have heard that once the randomly generated key when setting up encryption is lost, even if you know the pin/password you cannot un-encrypt the files ever again :(

I did take a backup a few months before this, but lost a few months of memories, not good. So armed with an encrypted file, an exact unencrypted backup, and the pin known, surely I could somehow generate a key that will let me unencrypt my own personal files :(

I hate my company now, foistering this garbage on us onto our personal devices (the other thing that didn't work was Note2 stock email client, I had to use that non-integrated Touchdown horrid app, but my colleague with S3 was able to use stock Samsung email app... go figure). The encryption even has a tick option "don't encrypt media files", which my company (presumably) conveniently greyed out.... this would have been ideal to allow my photos, videos, d/l media to be able to remain un-encrypted... but no, our pathetic American owned company is too anal about these things...

What was wrong with the control companies had using Microsoft Exchange ActiveSync anyway?
[Android General] r_e_n_e:
Is it possible to use mskip's Toolkit for Samsung Galaxy Ace 2 (Samsung GT-i8160) or is it another tool for backup?

Thanks for answer.
[Android General] FrikinImpossible:
Mobile iron allows emails/attachments to stay within mobile MI and it's affiliated "safe" apps. For example, if you received an email with a pdf document attached in a non mobile iron phone, you could open the attachment in any app and share to drop box, or export to your sd card. Mobile iron allows it administrators to specify apps that can open attachments. Apps that support mobile iron can have their export and sharing features disabled, making corporate data safer.
[Android General] vanstrien:
I just did this using Helium on an S4 instead of mskip, if you prefer that. Touchdown works without MobileIron now.
[Android General] walletless:
I cant access that download link for some reason.. is there a mirror?
[Android General] fintheman:
Where did Temp Root Remover, not on Play, not on Appbrain or anywhere else I can find the .apk.
[Android General] jaggy333:
Need Help with S4

MI at work shows my device to be rooted. They have now blocked me. I used the unroot method, disabled SU, and quarantined MI, but they are still able to see my unroot.

I don't need any email app running but just MI.

I have a Verizon S4, running hyperdrive rom, and I don't want to lose it?! Any help would be appreciated.
[Android General] makelegs:
That used to happen to me every few months. MI would block me, but a week or 2 later, I'd be unblocked. I honestly can't tell you exactly how long before I would find myself to be unlocked, again. I eventually gave up, as MI got better at singling me out.
[Android General] andlid:
This for BYOD devices only?

I'm guessing this is more for BYOD devices mainly?

I've got an corporate S4 here with a fairly locked down interface (SD encrypted), non-root (Obviously), Developer option has USB debugging greyed out, can install APK's though even though the Google Play store is not available on the device. I can't ADB shell to the device (not authorized) and during recovery mode on the S4 it's the same really. So any ideas on how to get around these little bits? :)
[Android General] milojoseph:
Does this work for Bradford Network app. I need conformation. Or can someone assist me cause it did not.
[Android General] Minister:
bypass lock pin

Hi All, not sure if anyone tried this trick..

One of the things I hate about MI is it forces a 6 pin code on my Samsung S4. Without root-ing, I tried this trick that seems to have worked to remove the pin requirement

1) Ensure that notification is off for MI (in Applications Manager)

2) Register your phone to sync with Samsung's account

3) Go to find my phone at Samsung's http://findmymobile.samsung.com/ (log in of course)

4) On the left hand side, under Remote Control, Unlock my Screen

5) After successful unlock of your screen, it REMOVES the pin requirement.

Works on my S4. Shut down my phone, restarted, sync corporate email, no problems. Let's see how long this lasts :)
[Android General] TigerDNA:
What way worked for you to bypass MI? I'm running SlimROM on my s4 so I can't uninstall the SU app
[Android General] TigerDNA:
Why can't we just copy the build.prop from the stock ROM ?
[Android General] GHOSTIVVI:
Has anyone been able to get this working on 4.3 and 4.4/4.4.2?
[Android General] frankquattrone:
Does anyone have an older than 5.9.0.0.151R? I just upgraded the app (stupid on my part) and all of a sudden it's now reporting my device as rooted. I am running a custom ROM on an S3 but I fully unrooted the phone using Super SU. I never had any problems with until the most recent update. If you're running any older version of MI, could you grab the apk and PM it over to me? Thanks in advance!
[Android General] jix001:
MI does an app inventory

MI takes an application inventory so in some cases it will recognize apks that use Root and declare u rooted. I tested this with an unrooted s4 straight from Verizon. Without mods but titanium and su installed. MI reports in rooted. Remove app and MI reports all clear.
[Android General] nuts77:
Hello,

I can confirm the JellyBean method worked for me on an HTC One with KitKat, except I used Rootcloak xposed module so I didn't even have to unroot.

One question - now that everything works while MobileIron is frozen, what happens if I uninstall it? What will be the difference?
[Android General] miffychan:
Bypass Mobile Iron for Windows Phone (Nokia 1520)

Anyone know how to bypass Mobile Iron for Windows phone?
[Android General] makelegs:
Wow...
[Android General] galakanokis:
What if anything did you add to rootcloak to be able to hide root from mobile iron? I have tried in the past and had no luck.

A frozen app acts just like the app is uninstalled. You should be able to delete the app with no issue.