yashsingh1/xdaforums huggingface dataset:
[LG V30 Questions & Answers] drewcu:
Hi,

Just joined a new company that requires Company Portal to access Outlook email and other apps on my phone.

Evidently even if you manage to hide root from Company Portal, a major requirement is having an encrypted device with Company Portal.

In order to get rooted 2 years ago, I ran Disable_Dm-Verity_ForceEncrypt during the TWRP setup process so my rooted V30 is not encrypted.

Is there any way to restore encryption now without losing my current stock rom settings and data and maintain root?

I see in LG Settings there is an option to Encrypt Phone and SD Card. Will this suffice so I can maintain root?

If not, is there a way to root and install a TWRP LG Pie Rom zip without disabling encryption via Disable_Dm-Verity_ForceEncrypt?

Or is it impossible to root and use Company Portal with the LG V30?

Thanks in advance!

Drew
[LG V30 Questions & Answers] ldeveraux:
My only solution to this problem was to always use webaccess for my Office365 account. They required the portal to use Outlook, and part of that requirement allowed them to wipe my phone whenever they wanted. It's my phone, so I guess I won't use their email on my phone.
[LG V30 Questions & Answers] schwinn8:
Sounds like your company has yet another behind-the-times IT department (like mine). Although mine is also exceptionally incompetent. They left the IMAP server open and available to anyone, so I simply used that with my GMail account instead. It did require me to allow them admin access to the phone to wipe the device (though I think they can only wipe the email) but it worked. They finally got modern and are using 365 so now it doesn't need these extra things. You might want to see if you can wait until they wake up and/or see if there is a server you can connect to. I found mine because, due to their incompetence, they let iPhones use the native mail app via the IMAP server, but forced Android to use some garbage 3rd party software for it instead of GMail. In both cases, the IMAP server was easily seen and setup.

I also have a company phone, so I don't really care if they can wipe it. Again, if I was going to take data from them, I'd do it before I announced I was leaving like any reasonably-intelligent person... so wiping accomplishes nothing. But, again, these IT departments are really dumb and incompetent...

To answer your initial question, I don't know if there's a way to re-enable encryption... but I also don't think that this is something that they can detect anyway. I'm thinking it may be something else they're tripping over. You may consider installing Magisk, and then using it's HIDE feature to see if you can hide the typical "signs" of rooting/etc. It may be good enough to get you working. If it doesn't you simply remove Magisk again (or just stop using it)?
[LG V30 Questions & Answers] drewcu:
Thanks @ldeveraux and @schwinn8 for the replies!

I know we use Office 365 but I'll have to ask about web access to see if that is possible. It's my phone and supposedly it's "not required" that I install Company Portal/Outlook/Teams on my phone, but I would be the only one at the firm not doing that and I am a new hire so... kind of a bad look so soon. I am not really comfortable with them being able to wipe my phone either, but that wasn't mentioned to me... yet.

Also would have to ask about IMAP, but I doubt it. No company phones either which is fine.

Pretty sure it is the encryption (or lack thereof in my case) that is the issue. I already use Magisk v22 and Hide all signs of Company Portal and pass Safetynet. On another XDA thread where Company Portal is discussed, I followed the suggested steps to no avail:

1) Install Company Portal V5.0.5067.0

2) Magisk Hide ALL of Company Portal checkboxes

3) Reboot

4) Still pass SafetyNet

5) Launch Company Portal

While the app doesn't specify the encryption as to why it cannot get me to the login screen, that's the only conclusion I can reach at the moment.

Did either of you try or look into encryption built into the LG/Android Settings menu? I don't want to do that unless I know of someone with success with it, but am curious if that would allow root via Magisk Hide, encryption, and Company Portal.

Thanks!

Drew
[LG V30 Questions & Answers] ldeveraux:
No I stopped carrying when they wanted permission to wipe. If the company was paying for the phone, that's one thing. If I'm using my personal phone for company use, that doesn't fly.

I realize this doesn't answer your question at all, but it's food for thought!
[LG V30 Questions & Answers] drewcu:
Carrying? Or did you mean caring?
[LG V30 Questions & Answers] ldeveraux:
Caring. I don't own a firearm.
[LG V30 Questions & Answers] drewcu:
Lol got it. Just making sure I understood what you meant. :)

Assume you didn't look into the LG rom based encryption then?
[LG V30 Questions & Answers] ldeveraux:
No at that point I gave up
[LG V30 Questions & Answers] ldeveraux:
Hopefully you'll get some help here, because I'd still like to be able to actually use Outlook on my phone!
[LG V30 Questions & Answers] schwinn8:
So, a quick search says that there are modules available and other things that need to be tried. One further thing is to hide root from various Google modules. I remember hearing that for some other apps... that you had to hide root from Google services. I also remember hearing that, in some cases, you have to clear data for apps after the hide, because they apparently save the rooted-status in their own data.

Basically, I doubt encryption is the issue... root is usually the problem and can be a bit tricky to hide properly. You just have to try things. I have never seen any app fail to work because encryption is not available... it's always a root-detection issue.

As for the IMAP thing, the point there is to use the settings you find elsewhere to access email. You're not asking IT for permission or info... you just need to find it. Most Microsoft-based IT places I have worked with have zero clue that this is open and offered, so once you find it it's just a matter of plugging in the right info.

As for the web-interface, again, my company (for example) doesn't tell us that we can use the Outlook app, but it works with no tricks whatsoever. Plug in your company account info and it figures out how to connect.

FYI, the module I mentioned above is referenced here: https://xdaforums.com/t/module-microsoft-intune-company-portal-hider-intune-hider.3780451/ - no idea if this is necessary or even the latest version...
[LG V30 Questions & Answers] drewcu:
Thanks for the suggestions! I actually have tried different modules without success both for EdXposed (Security Bypass for Company Portal with CP version 5.0.3013.0 and Bypass Exchange Policies). The closest I got was with CP 5.0.3013.0 where I could enter my credentials but then wasn't able to agree to the Terms and Conditions which is a prerequisite and got denied. The module you linked is no longer needed if using Magisk v22 with Magisk Hide according to people in the thread.

Have also tried the Outlook app, Outlook web access, Gmail, IMAP, POP3 -- all smartly locked down tight for compliance reasons by our IT. Just says to enroll with Company Portal after entering credentials.

Pretty sure the Magisk Hide route would work with V5.0.5067.0 if my device was encrypted. Company Portal checks whether your device is encrypted supposedly, so either you have to actually be encrypted or find a way around that. I am willing to be encrypted if I can still be rooted...

Not sure where to go from here to get it working without an encrypted device... but thanks for the post.
[LG V30 Questions & Answers] schwinn8:
As I recall, Xposed is not really working or functional these days. The module I linked to is a Magisk module. Did you follow those directions, because it sounds like you didn't.

It sounds like you don't want to believe me... that's fine. I believe the answers are out there and it's just a root issue. You probably just need to do more reading and searching. I'm going to give up since you don't seem to want to hear it from me, so good luck...

If you find a solution, do let people know on this thread so the matter can be closed/completed.
[LG V30 Questions & Answers] ldeveraux:
I remember the other reason I stopped trying to use the Company Portal. They need permission to wipe my phone, which obviously I'm not cool with. Whenever I disable the Company Portal, mail stops working. That's reason enough!
[LG V30 Questions & Answers] drewcu:
Yes I am aware that the module you linked is for Magisk. If you go to the OP, all the text is struck through because the module is no longer necessary as I stated previously.

https://xdaforums.com/t/module-micr...rtal-hider-intune-hider.3780451/post-84670511

So I followed the steps on page 23 of that thread using Intune Company Portal V5.0.5067.0:

https://xdaforums.com/t/module-micr...rtal-hider-intune-hider.3780451/post-84648133

The result is I am still stuck on the "Open the Intune App" screen... No other error messages related to rooting, but cannot even get to log in or download Outlook or Teams. Have tried downloading the Intune App from the Play Store and that tells me to open Company Portal... so going in circles... I'm told I need to only use Company Portal from our IT firm.

I went through the same Magisk module thread and found others talking about not having encryption, and they are in the same position as I am -- following the steps or using the Magisk module (before Magisk v22) and still not getting CP to work.

Thus I am 99.9% sure I cannot use CP because I don't have encryption. You don't have to believe me, but I have tried everything I can think of save for using LG's Encrypt Phone feature... Would do it if I got confirmation I could stay rooted, not lose my data/settings, and then use Company Portal.

But yes, I absolutely would post the solution here if I find it!

Thanks anyway.
[LG V30 Questions & Answers] ChazzMatt:
I'm rooted and have long had corporate email (two different companies) on a paid app called "Nine". First company was Fortune 100 global media company, and 2nd (past 3 years) is smaller but still has aggressive IT policies. Neither paid for my phone. I specifically remember with the first having to agree they could wipe the phone if it was lost -- but I think due to me being rooted they wouldn't be able to.

Nine - Email & Calendar - Apps on Google Play

Nine is a full-fledged and intuitive email app which supports Exchange and IMAP

play.google.com
[LG V30 Questions & Answers] drewcu:
Just tried Nine and it also tells me after entering my credentials that I need to use Company Portal (just like Outlook and Web Access).

Do these two companies you worked for use Intune Company Portal to manage policies?
[LG V30 Questions & Answers] ldeveraux:
I just installed portal and outlook, added both as admin or whatever it's called, and have a fully functioning inbox. I don't know if I'll leave it like this for the reasons I mentioned, but it works. I have the latest twrp, latest magisk, and adguard installed. I have no clue if I'm encrypted or not, how would I check? But I was trying to use the older version of Portal and it kept looping, so I installed the latest from the play store and we're up and running.

@ChazzMatt do you really think they can't wipe if they so desire? How could we confirm that? I surely don't want to give them that ability considering if you disable their permissions it stops working completely.
[LG V30 Questions & Answers] ChazzMatt:
For Nine I only needed the email server name.

For the previous Fortune 100 company I worked for, it was almost 4 years ago so I don't remember all the details but I remember granting them the privilege but I don't remember adding them as an admin.
[LG V30 Questions & Answers] drewcu:
Company Portal didn't used to work for you, correct? What changed? Can you please list your steps this time?

I think to check encryption you use Termux and enter 'getprop ro.crypto.state' -- mine says unencrypted.

One other question is what version of Twrp are you using? I'm using one from 2 years ago -- 3.2.3 and never wanted to bother with the Pie one 3.3 or whatever is latest... Might have something to do with it...
[LG V30 Questions & Answers] ldeveraux:
Company portal always worked for me, it was the permissions that made me stop using it. I literally installed portal, logged in, installed outlook, logged in, profit.

Mine is also unencrypted. I also followed this procedure on my lenovo tablet on Android 10 which is encrypted, and it works too.

My twrp is 3.2.3-7.

Seems like our systems are similar, though I'm on the vs996 latest pie ROM. Maybe check your ad blocking. I think that's the reason i can't login to the web portal of O365...
[LG V30 Questions & Answers] drewcu:
Gotcha so perhaps encryption isn't the issue then or perhaps Company Portal admins can decide what security requirements they want (ie, encryption mandatory or not, rooting detection, etc). You seem to be in the minority of people who can use Company Portal with a rooted VS996, and rooted, unencrypted phones in general it seems. I could be wrong about encryption and the admin customization though.

I tried your suggestion about the ad blocker and disabled AdAway completely, and disabled Minminguard because I disabled EdXposed completely, but nothing changed with different CP versions I tried. I am running rooted VS99630c which I am guessing you are on as well.

I cannot even get to download Outlook or anything; CP simply shows me the "Open the Intune App" screen (attached screenshot)...No other error messages related to rooting, but cannot even get to log in or download Outlook or Teams. Have tried downloading the Intune App from the Play Store and that tells me to open Company Portal... so going in circles... I'm told I need to only use Company Portal from our IT firm.

Other than uninstalling Magisk and disabling root, losing all module settings in the process, I am not sure what else to try here. There is some chance the issue I am having is on my IT company's end, as they are looking into things also.

Open to other ideas as I start this new job tomorrow (Monday)... thank you!
[LG V30 Questions & Answers] ldeveraux:
You haven't even started the job you need this for?? Screw that, make your company deal with this, they should get it working not you. I downloaded outlook and portal both from the play store, so they are latest. When I tried to use the older portal from that site above I was in the same annoying loop. Try most recent of both.

Also, why have you been on a call for 100 minutes?
[LG V30 Questions & Answers] drewcu:
Lol that was with the IT guy, getting things set up with the systems they use, but also talking tech which was fun.

I'm told Outlook will get installed through CP, not the Play Store, but could be wrong...

Am using CP 5.0.5103, but also have tried 5067 which was supposed to work with Magisk. So I have no clue how you are able to use 5103 when people were downgrading from that to 5067 to get it to work.

Glad I am not the only one in that loop, couldn't find anyone else mention it online. Most people seem to be able to download apps and enter credentials and then get errors. Cannot get anywhere myself.

Since we are all remote, I am not sure how the company or IT will be able to solve this if the issue is on my end. If it is on theirs, then we'll see...
[LG V30 Questions & Answers] Kris Chen:
Here is my experience on how to use company portal in a root phone but my phone has been encrypted. For instance, I use teams and outlook in my phone:

1.Hide teams and outlook in magisk manager. To tick all items be hided and it's very important.

2.Install " Service Disabler" from google play store.

3.Then get into Service disabler and disable any *intune* service in teams/outlook/microsoft intune company

portal.

4.Starting to registry your account and password in teams and outlook.

Good luck !
[LG V30 Questions & Answers] ldeveraux:
For what it's worth, I had neither Outlook nor CP hidden in Magisk and it was working fine. Also for those that can't read it, the other app in these pictures is Company Portal. Still hoping someone can chime in on the disabling their ability to wipe through Company Portal.
[LG V30 Questions & Answers] drewcu:
Based on this, I think Company Portal can be customized with different restrictions by an IT firm. Your setup seems very atypical given you don't have any issues with the latest CP version and don't have issues with a rooted V30 and don't even need to hide anything in Magisk.

Tonight after my first day at work, I decided to effectively uninstall Magisk/root by restoring the original boot image via Magisk. After reboot I lost all root access and fired up CP 5067 and 5103, and both resulted in the same Open the Intune App screen. I then reinstalled Magisk, so I am out of ideas with the exception of:

1) Encrypting my phone via the LG Settings option

2) Reinstalling the VS99630c.zip to restore some things to the defaults (and not flash Magisk yet)

3) Wiping and flashing VS99630c.zip to start clean

4) Somehow figuring out how to reverse the Disable ForceEncrypt done during the rooting process

I really think my issue relates to encryption somehow, so the only options I think could work are 1 and 4. But for now I am going to not have emails on my phone and see how I do.

Open to ideas though... thanks!
[LG V30 Questions & Answers] GoodSoul:
Here is another working solution that might help you to bypass the Microsoft Intune check:

https://xdaforums.com/t/tutorial-ro...t-intune-to-make-it-work-with-magisk.4402273/
[LG V30 Questions & Answers] drewcu:
Thank you for putting that together! Decided to finally take the plunge and update to Magisk 24.1 thanks to your guide (v23 was simple and just worked).

I haven't tried Intune in almost a year but with the help of your guide, I can sign into Intune and choose whether to accept the terms/conditions of my firm's IT access. Never got even to the step of signing in before but like I said I haven't tried in over a year so no clue whether newer Intune versions might have worked with Magisk 23.

I passed Basic Integrity but not CTS profile match and used MagiskHide Props Config to change the fingerprint, but didn't find one for my stock ROM VS996 V30 on Android 9. Scariest part was changing something legit to something not made for my phone as I picked the LG G7 on Android 9 since that was the only Android 9 option.

Not sure if Intune detected the unlocked bootloader and wouldn't work before and works only now that the fingerprint is legit?

I've lived without email on my phone for almost a year and it has been kind of nice to have that separation between work and personal life. Seems like now I have that option but the question is - do I really need/want it?!

But thank you again @GoodSoul - you truly live up to your name!!

~Drew
[LG V30 Questions & Answers] GoodSoul:
Tutorial updated to make it work again. Enjoy.
[LG V30 Questions & Answers] nmhusa:
My company outlook detected Magisk without root and claimed the phone was rooted and demanded that outlook account be uninstalled.
[OPPO Find X2 Questions & Answers] krytonx85:
Hi Guys,

Looking for a power bank with somewhat relative fast charging ( I suspect getting 65w is not possible) for my x2 pro

Is there any recommendation that would work with Super Vooc or if you have other recommmendation - please share
[MTCD  Android Head Units Q&A] jlbooth:
This post is not asking how to assign steering wheel keys, it is intended to be an instructional post to maybe help some of you who have found that you cannot change your steering wheel key assignments using the WheelKey Study app on your MTCD/E head unit.

These instructions will likely work for both PX5 and PX6 systems.

My system is a SYGAV/Dasaita PX6 4G RAM/64G ROM.

Here is the About Machine for my system:

View attachment 5266783

Access factory settings:

Settings... Car.... Factory settings... Password 126 or appropriate for your system

Select the "other" category at the top

View attachment 5266785

The setting you're looking for is "Steering wheel keys assign" If this is set to SWC Key marked above in RED you will NOT be able to change the steering wheel button assignments. with the WheelKey Study app.

Change this setting to - Can Key - as indicated below with GREEN rectangle

View attachment 5266945

Touch Apply and then touch Exit.

The system will now reboot. Once it comes back up, go to WheelKey Study app and press one of your steering wheel keys. You will be able to assign the key you pressed to one of the available functions.

This shows my Wheelkey Study, notice I was able to set the keys and all work as I assigned them.

View attachment 5266903

Note that you must assign ALL of the steering wheel keys when using Wheelkey Study. Otherwise you will be left with steering wheel buttons that don't work.

Optional step: After setting steering wheel keys change that factory setting back to "SWC key" and the assignments made in Wheelkey study still work as configured in WheelKey Study

Please post if you would like additional details about my system/vehicle/etc.

------

Thank you to @Moldeb for additional information.
[MTCD  Android Head Units Q&A] typos1:
Nice thread.

To turn CAN Bus off you set it to "CAN key", not exactly intuitive, lol, reminds me of when I spent ages trying to get my reverse cam to work and the only way it would was when rear cam was set it to "disable" in factory settings, of course this was the last thing I tried.

This will work for ALL MTCD/E units with any processor - RK3188/PX3, RK3368/PX5, RK3399/PX6 and Intel Sofia - as long as they have a later MCU that supports it - its all done by the MCU, not the SoM.
[MTCD  Android Head Units Q&A] jlbooth:
Thank you @typos1 Know what you mean with the reverse cam setting and how it would be the last thing you'd try. There are alot of counterintuitive settings on these units.

I think what happens is they just copy letters from Google translate or similar without really knowing what they mean or how confusing it CAN be (couldn't resist the opportunity there).
[MTCD  Android Head Units Q&A] gromsop:
Excellent thread !

I have buy HU designed to work on Audi A6 C5 but swaped into Audi A4 B5 Avant (2000) that use CANBUS protocol.

Just needed to solder the 2 green cables out from the CANBUS box to PINS 5 (CAN H) & 6 (CAN L) on the gray connection plug back from instrument cluster (green -> pin 5 ; green/black -> pin 6)

This handling can start automaticly the HU if you switch on the vehicle's ignition and also allows you to react when you turn on or off the headlights.

Now i want to use my steering wheel control but nothing work when i push on one of the buttons in the study wheelkey app...

I will test your "how to" this afternoon and back to you to tell if it work or not ;)
[MTCD  Android Head Units Q&A] jlbooth:
Thank you @gromsop. Please report back with your findings. I posted some additional thoughts over in the other thread. My plan is to update this thread and bring together the useful bits once we know what works and what doesn't. Perhaps this thread may prove useful for both those who have Canbus and those who are running a universal head unit with no Canbus adapter. Good luck to you.
[MTCD  Android Head Units Q&A] PoppaRoxie1986:
As others here have said, nice thread @jlbooth. Good to see an informative post and not somebody posting same ole question that's been asked many times before without taking time to search.