yashsingh1/xdaforums huggingface dataset:
[Magisk] GoodSoul:
Well, to be honest I just read one or two pages of the (now more than) 30 pages. And all I see there is a lot of crossed out text and "It's not working" messages. Thats why I linked the new method here. But sure, if one solution of here works go ahead. ;-)
[Magisk] skuppej:
Uh huh....well this is the exact same method as what I posted here:

tldr;

@GoodSoul thanks for reposting in new thread for all the newbies. Next time just give credit where credit is due ;)
[Magisk] GoodSoul:
Hey skuppej,

I would have given credit but I tried it myself and got to that result. Nevertheless, I will add the link to my main topic.

And you are right, safetynet pass is not required but nice for other banking apps. ;-)
[Magisk] dejson:
I have one more question, can we use xposed, I want to install customiuizer. I am not sure if intune can detect it and mark it as a some kind of root.
[Magisk] matmat07:
Is this still working for you?

I am passing safety et, but I can't pass intune.

I've tried both Shamiko and the universal fix. If someone is willing to try and and me, I could take pictures to try and document it, or do some other tests to isolate the issue.

I'm on the latest stock Oneplus 7t ROM.

Edit: nvm, it works now. I'm not quite sure what helped, maybe removing riru and everything xposed related.
[Magisk] persmash:
Hi,

I've InTune v5.0.5421 installed and Magisk v24.1 installed.

I've followed the steps mentioned here but still InTune detects the root.

Is there anyone who successfully able to bypass root detection with the latest version of InTune?
[Magisk] persmash:
I have stock ROM with root and getting the same mesaage. Have you succeed fo find any solution?
[Magisk] aygul12345:
Thanks for your reply!

I'm struggling to install .apk, but while having company intune configured, it's not allowed.

Do you have tips for me how to achieve my goal to get the .apk installed outside of the playstore?
[Magisk] shouk_1987:
Hello Skuppej.

I am on zygisk denylist + shamiko + ticking all processes in denylist

I have also installed universal safetynet but removed it as it doesnot make a difference and i donot have an issue to fail safetynet for now

I am passing intune and Outlook app only

However Onedrive , Office and Teams says i am having policy error and refuse to log in

I would appreciate any assistance as it is crucial for my work environment
[Magisk] skuppej:
hmm that's hard to say. What is the exact error that you are seeing? Also, it sounds like you might be using a work account. There is a way to check your account for policy violations inside the Intune app to get more details. Mine gave me a violation for having USB Debugging enabled .... 🤦‍♂️
[Magisk] shouk_1987:
Yes i know the check from intune and intune passes root and sees no violation and only outlook works

Tried to restore boot image and remove root so i can troubleshoot and know if the rootcause is from root or another app that is causing conflict or being detected

I found it is root and all work apps wprked like charm when root is removed hence the hiding algorithm of denylist seems not working fine

I will try today magisk canary as i heard it still has magiskhide

Edit : Issue was solved in latest Magisk stable 24.2 that was released today (for sure update related to Zygisk denylist process capture )

Now i have Companyintune and all my work apps working fine ( Outlook , Teams , Office , Onedrive & SAP success factors )

I did not install Safetynet module ( as it lowers the performance ) and i am failing safetynet ( I do not care as i donot have GPay in my country and i do not see any need for it )
[Magisk] persmash:
Did you guys find any solution for the "Custom OS" message? I've set my system status back to "Official" with Firefds Kit but no luck. It still says "Custom OS". I think that is maybe because of unlocked bootloader.
[Magisk] tomiasx22:
One question, if I would like to use intune company portal on work profile (and install apps from this portal) is it better to root with latest magisk only or together with twrp? (I mean can I use custom bootloader in this case)
[Magisk] tomiasx22:
Could anyone help? I am looking forward for the answer :)
[Magisk] vMAC:
Does this module still work?

Outside of just getting Intune to work while rooted. Does anyone know of a way to allow installing of "non approved" apps in the work profile. Or is there a way to allow for copying/pasting between the two?
[Magisk] mr-mauro:
I've just clean installed PE12 on a Poco F2 Pro, and it works everything pretty smoothly.

I have just installed Universal SafetyNet Fix and Enabled Zygix, Enforced DenyList and configured all the Microsoft apps in the denylist (with all the processes)

P.S. ROM is encrypted
[Magisk] tomiasx22:
OK but did you install all the apps within Intune app? I mean from work profile inside Intune app, or you get message that cannot authorize phone becouse you have installed non stock system?
[Magisk] mr-mauro:
I've installed all in intune, within the work profile. And there is no need to expose them in the "normal" profile too as it was with older Magisk to have the possibility to hide them (deny list).
[Magisk] tomiasx22:
Seams good.. I am only wondering how it will work on my Samsung S10. I have last questions:

-Did you use only systemless Magisk or with twrp installed?

-And if about work profile, how did you create it? From island app or different? In Samsung there is problem with creating such profile on rooted device..

When I manage to create one with island app (on Magisk 23.0) then no matter which lock screen method I use, phone bootloops..

-if about modules, did you install also Magiskhide props config, Riru, Lsposed and XprivacyLua?

-which Intune version did you use? Latest from Google Play?

Thanks.
[Magisk] mr-mauro:
You have just to try to see if it works ;) It doesn't harm anything ahahah

Anyway:

- I installed Magisk via TWRP and then hided Magisk app.

- I created it by launching intune app that is installed in the "normal" profile.

- I installed Universal SafetyNet Fix and Enabled Zygix, Enforced DenyList and configured all the Microsoft apps in the Denylist (with all the processes). None of the things you listed.

- Latest from Gplay
[Magisk] tomiasx22:
Thanks much for your answers. I am only wondering about installation of Magisk.. On different sites I saw it should be installed from apk from system. How can I install it from TWRP?
[Magisk] mr-mauro:
You install the zip from twrp, and that's all. That install automatically the apk in android too. But that's only an interface to the magisk that is patched into the bootloader. The apk app itself won't do anything ;)
[Magisk] tomiasx22:
Yes of course, I know this. But please note that even on topjohmwu site it is written that you should install magisk within this Magisk apk (you know additional setup after you install apk), I did always in this way and then had "properly installed root". Which zip package do you use to install in TWRP, is that Source code (zip) from github?
[Magisk] mr-mauro:
The APK is the same file for the installation via twrp (changing the extension to .zip) and to remove it (renaming it to uninstall.zip).
[Magisk] tomiasx22:
ok, I understand, but method of installing Magisk (within the app from system or in TWRP also doesn't matter in this case? :) )
[Magisk] mancman:
This works:https://xdaforums.com/t/tutorial-ro...t-intune-to-make-it-work-with-magisk.4402273/
[Magisk] KoopstaMC:
Worked like a charm! Kudos!
[Magisk] persmash:
I've reflashed stock firmware and disabled OEM unlocking on my Samsung S9 but it still says "Custom OS..."

What is the method to completely return to factory?
[Magisk] jdmst77:
I'm not having any luck with hiding root from Intune but I was able to uninstall Intune, Outlook, and finally Magisk (to unroot) then after a reboot, I was able to install Outlook then Intune and setup my work email without issue...

but the phone is without root which sucks because it's so hard to part from Battery Charge Limit and AdAway
[Magisk] masri1987:
wish this could be updated to work with pixel 7 pro
[Magisk] bsg411:
With the newest magisk you didn't need the module anymore but even that seems to have stopped for me and now Intune is back detecting root again!!
[Magisk] ScottIsMyName:
Yes, Zygisk + enforce list stopped working suddenly on my Pixel 7 :(
[Magisk] reconan1:
I have the root perfectly hidden, intune, Outlook and all Microsoft applications work without problems except Teams, which happens to be the one I need more .... When I go to log in Teams does not access and there are two things that indicates in more detail that may be the reason, that the device identifier is not available and that the device is not registered, when it is. Any ideas?
[Magisk] GoodSoul:
... and now works again. I've updated the thread. ;-)
[Magisk] teddysx3:
Hello everyone,

For me it does not work, my steps were.

Root

hide magisk

zygisk enable

Enforce denylist

denylist teams and intune

download teams and intune

It does not work, it still detects that I'm rooted, any ideas?
[Magisk] teddysx3:
Ok so I installed Shamiko and it worked! I used this guide and it worked for me, thought it will never work because I tried everything. - https://xdaforums.com/t/tutorial-ro...e-it-work-with-magisk-update-q1-2023.4402273/

Please pay attention to all the steps!
[Magisk] jukyO:
@teddysx3

so you did all the steps, and you are using latest versions of Intune Company Portal and Microsoft Teams?
[Magisk] teddysx3:
Yes, did all the steps, all the apps I downloaded from the play store. Make sure if you have previously downloaded and ran the apps, and it did not work, to go inside each apps settings - storage - clear storage and cache.
[Magisk] luisgerardo01:
Hi,

It's working now for Intune, though CTS still failing for me. I have a hard app that may work to do some tests, it's called Cashi from Walmart. Until now, it still detects root. Not any other banking app or Intune.

Regards,
[Magisk] labbala:
any update on this ?

having Samsung Galaxy S23 Plus.

Using company portal app v5.0.6060.0 (as for this post date latest)

have all installed latest versions to this post date (29 Nov. 20203):

Magisk Delta + hide all needed apps (fully expended each)

installed Shamiko

play integrity fix

passed basic integrity and device integrity

deleted cache and data for Play store and Play Services

rebooted the phone

company portal after login give message with title:

"Can't create work profile"

with message content:

"The security policy prevents the creation of a work profile because a custom OS has been installed on this device"

didn't found a way to make this work ..
[Magisk] spida_singh:
try the new delta (kitsune):-

Releases · HuskyDG/magisk-files

Contribute to HuskyDG/magisk-files development by creating an account on GitHub.

github.com

WITHOUT SHAMIKO

I personally use KSU and Zygisk next, Pixel 6 wityh Lineage OS, and Intune is fine.
[Magisk] labbala:
with what version of company portal ?
[Magisk] spida_singh:
5.0.6060.0
[Magisk] labbala:
ok so now this is my setup :

Magisk Delta (kitsune)+ hide all needed apps (fully expended each) - without Enforce deny-list

Zygisk next

play integrity fix - passed basic integrity and device integrity

deleted cache and data for Play store and Play Services

rebooted the phone

before app manager:

gotten company portal after login give message with title:

"Can't create work profile"

with message content:

"The security policy prevents the creation of a work profile because a custom OS has been installed on this device"

using App Manager

i have changed only the bold items as recommended:

[Tutorial] [Root] How to configure 'Microsoft Intune' to make it work with 'Magisk' (Update: Q3/2023)

Update 04.01.2023: I've added shamiko magisk module to make this tutorial work again. Update 19.07.2023: Some were able to make it work by cleaning the data of Google Play Store and Google Play Services. Added. This question was asked many times...

xdaforums.com

Omadm client service

Omadm client service api 26 - this doesn't exist in the new versions of company portal

Due to the changes of app manager i'm getting application timeout that it can't create work profile since the device doesn't support (see attach picture for message)

can't make it work for me ..
[Magisk] spida_singh:
what ROM are you using?

You dont need zygisk next with kitsune, as kitsune is based on ZygiskNext code, just use kitsune alone, with nothing else installed and ignore

[Tutorial] [Root] How to configure 'Microsoft Intune' to make it work with 'Magisk' (Update: Q3/2023)

Update 04.01.2023: I've added shamiko magisk module to make this tutorial work again. Update 19.07.2023: Some were able to make it work by cleaning the data of Google Play Store and Google Play Services. Added. This question was asked many times...

xdaforums.com

for now.

You shouldnt need the app manager etc.

Also ensure unmound modules by default as well as su list is checked, i dont use kitsune, so you will have to play around with settings.

When i used to use Delta (pre kitsune) i made sure unmount modules was checked, as well as enforce / use SU list, not sure what its called now, if you send screenshots, i can guide.

before creating your work profile again, uninstall and re-install intune, making sure the old work profile is deleted if one has been created
[Magisk] labbala:
i'm using the same ROM of Samsung origianl just with Magisk patch - OneUI 5.1 - Android 13 from Oct. 1st 2023

i have done uninstall and re-install intune company portal and deleted cache and data for Play store and Play Services

rebooted

but still unable to create workspace ..
[Magisk] spida_singh:
So its a stock ROM, and all you have installed is Kitsune?, can you create a work profile successfully without kitsune installed?
[Magisk] DaCHeF36:
Shamiko 0.7.4 working on Magisk 26.4 (hidden). Zygeist enabled. DenyList configured, but not enforced. I am unsure about all of the "profile" talk. I am able to configure my 365 apps with these settings on the latest Company Portal app version (5.0.6078.0).
[Magisk] nickelnine:
Is there a way to bypass lock screen requirement? My company not only enforces 8 character PIN but also a maximum 2 minute timeout before locking again which is quite tedious and ridiculous.

I have tried executing

locksettings clear --old <PIN>

but it doesn't take effect.

Any advise is appreciated.

Rooted with latest stable Kitsune and latest Intune Company Portal from Play Store.
[Magisk] image18:
it works perfectly now.

thanks.:)
[Magisk] Dreamer(3MF):
-------------------------------------------------------------------------------------------------------------------------
[Magisk] Dreamer(3MF):
The General Steps:

- Download ClearDalvikCache4Magisk From This Thread https://xdaforums.com/apps/magisk/module-dalvik-cache-t3787264 & Flash It Thru Magisk Manager Then Reboot

- Download ClearPlayStoreWithServicesData4Magisk From This Thread https://xdaforums.com/apps/magisk/module-google-playstore-services-data-t3789498 & Flash It Thru Magisk Manager Then Reboot

- Your Device Should Pass The SafetyNet (Enable WiFi --> Magisk Manager --> Tap To Start SafetyNet Check Or Download SafetyNet Helper Sample From PlayStore)

- If Your Device Didn't Pass The SafetyNet, Try DeviceSpoofingTool4Magisk From This Thread https://xdaforums.com/apps/magisk/qa-want-to-install-modules-magisk-v13-3-t3800435

- Intune Added Some Devices & Fingerprints To Its Blacklist So Try DeviceSpoofingTool4Magisk From This Thread https://xdaforums.com/apps/magisk/qa-want-to-install-modules-magisk-v13-3-t3800435

- Add Email Exchange Client (

Outlook & Gmail Will Be Added Automatically

) To The List Of Magisk Hide (Magisk Manager --> Magisk Hide --> Choose/Select The Mentioned App)

- Clear Data&Cache Of Both Of Intune & Email Exchange Client (Such As Outlook & Gmail) (From Settings --> Apps --> The App --> Storage --> Clear Cache --> Clear Data)

- Download

Stable Version

(Not Beta One) From This Link https://androidfilehost.com/?w=files&flid=274608 Then Flash It Thru Magisk Manager --> Reboot

- Try To Use Intune & Email Exchange Client (Such As Outlook & Gmail)

- In-Case Of Failure, Check This Post https://xdaforums.com/apps/magisk/module-microsoft-intune-company-portal-t3780451/post76606993
[Magisk] Vin87:
Works perfect for me! I'm using it on Magisk 16.4, no issues. Just after updating the rom (dirty flash, no wipe) Outlook detected root. After reflashing the module, re enabling it, wiping Outlook it started working again. Module is simple and perfect for me.
[Magisk] paarnoutse:
Does Intune at your device still have Device Administrator rights?

This because I encountered similar problem: After working OK for many weeks, Intune detected root at a certain moment and my device enrollment was disabled. At my device, the Device Administrator rights for Intune were - without I realized that - removed because I had temporary frozen Intune for a certain reason via Titanium Backup, and defrost it afterwards. All continued to work OK *even* without Device Administrator rights for Intune, UNTIL I had to change my account password!

See https://xdaforums.com/showpost.php?p=76813776&postcount=255 for more info.
[Magisk] Dreamer(3MF):
For Passing The SafetyNet, Check This Post https://xdaforums.com/apps/magisk/module-google-playstore-services-data-t3789498/post76682978.

Magisk-v16.4 Is Not Suitable For Most Of Us To Use Due To Many Issues So That Flash Its Replacement Magisk-v16.3.1(ThePatchedBinary) From This Link https://androidfilehost.com/?w=files&flid=278435 Or Magisk-v16.3 (Instead Of Magisk-v16.4).
[Magisk] Dreamer(3MF):
Updated IntuneHider4Magisk To v0.1.3.1!

Changelog: Adding Google Play Services, Google Play Store & Google Services Framework To Magisk Hide List

I Am Asking Our Mates To Check The Stable&Beta Versions And Share The Feedbacks/Ideas/Questions To Enhance/Modify The Module.
[Magisk] Lunat1q:
Ane chance this mod can fake phone encryption?:)
[Magisk] Dreamer(3MF):
No, There Is No Way To Fake The Phone Encryption As I Know.
[Magisk] MogiMogi:
Spent 4 hours here just to end up with knox enrollment notification. But my s8 is on googlewiz rom and knox is removed... Any chance of knox'less samsung friendly release?
[Magisk] Dreamer(3MF):
Kindly Do The Following: (Just A Trial)

- Disable WiFi & Data

- Download DeviceSpoofingTool4Magisk From This Link https://androidfilehost.com/?fid=5862345805528051729 Then Flash It Thru Magisk Manager Then Reboot

- Download ClearPlayStoreWithServicesData4Magisk From This Link https://androidfilehost.com/?fid=890278863836289937 & Flash It Thru Magisk Manager Then Reboot

- Download ClearDalvikCache4Magisk From This Link https://androidfilehost.com/?fid=746163614322269097 & Flash It Thru Magisk Manager Then Reboot

- Wait About 5 Min. Then Enable WiFi/Data

- Wait About 15-30 Min. Then Check PlayStore Device Certification Status (Google PlayStore --> Settings --> Device Certification) & This Time Should Be Certified

- Check The SafetyNet (Enable WiFi --> Magisk Manager --> Tap To Start SafetyNet Check Or Download SafetyNet Helper Sample From PlayStore)

- If It Didn't Work, Disable Magisk Hide Then Enable Magisk Hide From The Section Of Settings In Magisk Manager & Reboot

- Check Again The SafetyNet & If It Didn't Work, Disable/Uninstall BusyBox/Xposed Then Reboot

- Check Again The SafetyNet & This Time Should Be Passed

- - Add Email Exchange Client (Such As Outlook & Gmail) To The List Of Magisk Hide (Magisk Manager --> Magisk Hide --> Choose/Select The Mentioned App)

- Clear Data&Cache Of Both Of Intune & Email Exchange Client (Such As Outlook & Gmail) (From Settings --> Apps --> The App --> Storage --> Clear Cache --> Clear Data)

- Download IntuneHider4Magisk From This Link https://androidfilehost.com/?fid=5862345805528041097 Then Flash It Thru Magisk Manager Then Reboot
[Magisk] MogiMogi:
Did all that. Passed the part where it failed before, but at the end got notification to accept knoz popup. No knox on my samsung, therefore I could not finish setup.
[Magisk] Dreamer(3MF):
Kindly Send Full Logcat Along With A Screenshot Of The Appeared Message.
[Magisk] Dreamer(3MF):
To Ensure That The Module Will Work Properly, Kindly Do What Are Mentioned In The General Steps.
[Magisk] fernoct:
Is this module fully working on Android O 8.1 pls, and automatically disabling the module in Magisk sorted now? Let me know pls. I'm going to install Magisk and root my Mi A1, just to ensure before that..
[Magisk] kantjer:
I'm using this on Oreo 8.1

Installed and working out of the box
[Magisk] Dreamer(3MF):
It Should Work But You Need To Do What Are Mentioned In The General Steps To Ensure That The Module Will Work Properly.
[Magisk] spicediablo:
I am having problem after updating to the latest version of intune module. My intune module is always unchecked (disabled). Even after I have checked it and rebooted, it is still unchecked. What could be the problem? I have uninstalled and installed again

Sent from Sagit
[Magisk] Dreamer(3MF):
According To The Current Approach, This Is Normal Because The Module Needs To Be Run One Time After The Installation & Disables Itself Immediately.

In-Case Of Facing Any Issue With Intune For The Root Detection (

Not The SafetyNet

), You Need To Do The Following

- Clear Data&Cache Of Both Of Intune & Email Exchange Client (Such As Outlook & Gmail)

- Enable IntuneHider4Magisk From Magisk Manager Then Reboot

In-Case Of Facing Any Issue With The SafetyNet/Device Certification, Download DeviceSpoofingTool4Magisk From This Thread https://xdaforums.com/apps/magisk/qa-want-to-install-modules-magisk-v13-3-t3800435 & Do What Are Mentioned In The General Steps.
[Magisk] spicediablo:
Thanks for the clarification!

Sent from Sagit
[Magisk] atulclassic:
easily the most useful and working module for magisk..kudos to the developer and contributors.
[Magisk] chhapil:
Please publish to magisk repo.

I'll can help if needed
[Magisk] rajkatiyar07:
Wow ! working on my HTC 10. One question ! can i update outlook app if any available in future ?
[Magisk] Dreamer(3MF):
Yes, You Can Update Outlook App.
[Magisk] aPexalpha:
This. is. perfect! I had to use tasker profiles and all to get around the stupid intune portal. I'm getting my new phone tomorrow and was wondering if there were other ways of achieving this and then I found this topic. Niceeeee

Will update tomorrow with feedback!
[Magisk] ram4ufriends:
Not taking out any credit out from this wonderful mod, but the latest magisk version 16.7 works fine with Intune.. you don't need any mods installed.. if you are on lower versions, you can use this mod
[Magisk] image45:
I was working on the merit's of the mod maintains a higher achy of that needs to be hidden by magisk hide.
[Magisk] spicediablo:
After updating to latest intune app, my root check failed. Anybody faced this?

Sent from Sagit
[Magisk] atulclassic:
same here

latest update ver 5.0.4140.0 is able to detect root.
[Magisk] paarnoutse:
Typo, or do you really mean 5.0.4140.0?

Latest Intune version shown for me in Play Store is 5.0.4104.0 (updated 2 jul. 2018), and root still not detected.

Device: OnePlus 5, running Oxygen 5.1.4 (Android 8.1.0), Magisk 16.0 (stable) with this Intune Hider module installed, and obviously Intune itself + all MS Offices apps + Skype for Business + Chrome + Authenticator + Play Store hided.
[Magisk] spicediablo:
Mine is still not working after hiding chrome. Previously not hidden

Sent from Sagit
[Magisk] subarctic2123:
I got an update on intune as well yesterday. When the app was started I could start it and all applications was grayed out. When I restarted it a second time it stated thay my phone was rooted. So they have developed a new way to detect root. All safetynet and rootcheckers passes without problem.

I have hidden all microsoft apps and everything stated above.
[Magisk] subarctic2123:
Latest intune is 5.0.4140.0 release 8th of august for me. Root detected.

Oneplus 5T OOS 5.1.4 Android 8.1. Maybe different releases for different Android platforms?