yashsingh1/xdaforums huggingface dataset:
[General Topics] DJionut123:
Hi, and thanks for sharing this. I have the same issue, all MS apps were working just fine for years, until yesterday. I have the official Magisk app, and wonder what is different about the Alpha version which makes this work. Do you have any ideas? Is there a chance a solution can be found which will work on the official Magisk version as well?
[General Topics] Messatsu:
Hi everyone, FYI I had to install an older version (5.0.5921.0) of Intune in order to make it working again, 5.0.5926.0 didn't work for me.
[General Topics] spida_singh:
Same devs just a different take on Magisk with their own tweaks and additional hiding methods from what I can gather

Completely trusted, can't tell you what the changes are more than that.

Official Magisk and Delta didn't work for me. So moved to Alpha.

Magisk V27 MAY resolve this. If yo can wait,that's fine. If. It you'll be perfectly fine using Alpha

But it works fine.
[General Topics] DJionut123:
Hi

I have tried this version as well, and I can sign into Intune, it syncs my management policy in the settings, but teams still gets stuck on the device health step. Pulling my hair out...
[General Topics] Messatsu:
Make also sure to delete all data from Teams & Outlook apps
[General Topics] ldeveraux:
This is still not an iPhone forum.
[General Topics] DJionut123:
Yeah I have done that, even uninstalled and re-installed. It's strange that InTune opens seemingly with no issue, and Teams does another call to sync the profile and when that response is received the device health is triggered.
[General Topics] supermansaga:
Default is blacklist mode, but I have been used to whitelist mode for months now. So it's surprising to see it doesn't work like with the official Magisk version
[General Topics] supermansaga:
You can just DM me if you aim to be the kind of helpful people. But I guess you are not. So let's just leave it at that. I am grateful for your time and consideration. No need to do several more rounds and get OFF TOPiC
[General Topics] Thracks:
Yesterday, rolling back to the x.5921 or x.5926 versions of Intune ("the workaround") worked to add my company profile. Now it doesn't work at all. Even adding work account through the old app and preventing updates to InTune from within the work profile, the device now fails policy. Boooo.
[General Topics] mGforCe:
Can you check if something got updated?

I had downgraded Intune version and also hidden it from playstore. So far good for me.
[General Topics] Thracks:
I suspect my company's MDM solution is pushing an update to InTune from inside the work profile. Even if you disable app updates for InTune in the work profile's Play Store, Azure/InTune can push an update. So while enrollment works with the downgraded InTune app from the main user profile, the work profile update soon gets pushed and breaks it. I also have InTune detached from the Play store, but it didn't matter.
[General Topics] mGforCe:
Wow... was not aware of such.

I also see that in LSposed we have option to install to user Work Profile.. Not sure if installing HMA will help.
[General Topics] supermansaga:
I finally realized the Shamiko that came with Magisk Alpha simply can't have whitelist mode, unless mistaken. So I removed it and re-installed one on my own and this time I could find it in the usual path and whitelist mode can be enabled, though at this point, Intune Company portal 5.0.5975 can no longer work and we are forced to update to 5981 which at this point, none could handle. In case I wasn't clear, I tried to manually install 5975, but there would be prompt asking do you want to update, and if one says no, 5975 won't be installed anyways. And if one proceed to update, then it's the same old 5981 that doesnt work.
[General Topics] GoodSoul:
So, now my root is not working either. A temporary solution is to use an older version and turn off updates for the app (check previous postings).

Currently I am using version Microsoft Company Intune 5.0.5926.0.

I find it interesting that it is possible to hide the ROOT from Intune with the Alpha-Magisk. Are there other people who have tried it with the Magisk alpha version? If so, how far did you get and what was the result?

As soon as there is a solution without downgrade, I will update my guide. I will be on vacation so do not expect an update before mid of October. :)
[General Topics] CharlieMHz:
Hi, just sharing my setup here. I'm able to use Teams with Intune v5.0.5981.0.

Magisk Alpha 26301, not hidden/renamed

Zygisk ON

Enforce DenyList OFF

Teams and Intune in DenyList, all boxes checked

HMA 3.2, blacklist template hiding Magisk and HMA, applied on Teams and Intune

Modules :

USNF 2.4.0 MOD 2.0 by Displax

Shamiko 0.7.3

LSPosed 1.9.1

Most important things I noticed are Shamiko, and hiding the Magisk app (either using HMA or Magisk's own rename hiding). The others don't seem to matter too much, but I've written all down just in case they do matter. I've tried it on Delta and Alpha, both work.

Things to note:

Remember to remove and reinstall modules when changing Magisk forks

Clean Intune and Teams data every attempt

Reboot phone after making changes in HMA
[General Topics] TnargNaanac:
I can get "Company Portal" to give me the thumbs up using Shamiko, HMA 3.2, etc, but again, it still seems like the actual Msoft apps are the ones catching it. Can someone with a working setup verify the versions of Outlook and Teams they're using? Mine are:

Portal - 5.0.5926.0

Outlook - 4.2334.0

Teams - 1416/1.0.0.2023153801

Oddly enough, Authenticator lets me in, but it's giving me a "registered on too many devices" error.
[General Topics] vukis:
Mines:

Portal 5926

Outlook 2334

Teams 2023163401

Also worth mentioning, that I unmarked portal app from auto updating, but it still updated in like 24 hours. Now I went to work profile play store settings and choose "Don't auto-update apps" under network preferences. Still going strong for last 3 days. 🤞
[General Topics] vMAC:
Teams = version 1416/1.0.0.2023153801 and it works for me let's me in fine.

Portal = version 5.0.5926.0 works fine root not detected.

Outlook = version 4.2334.0 and it does not let me in as of this afternoon. Will roll back Outlook and see I'd that fixes it.

******Update *****

Outlook version 4.2332.1 works
[General Topics] Killer-User:
I am getting "company portal app is out of date" error for outlook..any suggestions to bypass this ??

*Edit*

Mentioned version works....not getting out of date error now
[General Topics] DJionut123:
Hello guys,

I've downgraded to mentioned versions of apps, and I'm getting stuck on the sing-in screen of teams. After entering my username, I get the error "There was a problem with the network. Try signing in again." Google said this was most likely linked to the authenticator app, so i uninstalled and re-installed it, and re-created the work account using the QR code scanning.

I manually started the "Enable browser access" option in the settings of the intune app, and installed the VPN / app access certificate, still the same error appears.

Has anyone faced this issue?

edit 1: Seems to be similar to this although I don't have a Samsung phone, and also here.

edit 2: Outlook also doesn't want to log in, an error log is provided after providing the username:

Troubleshooting details

If you contact your administrator, send this info to them.

Copy info to clipboard

Correlation Id: eb7e02dd-5f20-4300-8975-ff2aac8a1012

Timestamp: 2023-09-18T22:04:17.000Z

DPTI: 244366e3661844f3

Error Tag: 4yuxm

Error Code: -1699931554
[General Topics] bizkit_120:
Hi would you pls suggest how to downgrade outlook on work profile? Or side load older version, my phone successfully passed company portal check, issue comes when sign in outlook...

Anyone can shed some lights on this ,thanks in advance.

((Screenshot is where healthy check failed right after sign in outlook.))
[General Topics] adinechin:
Is there any ongoing work on Shamiko module or safetynet-fix for this ? I'm in the same situation and also with a work profile where it's difficult to install a file apk...
[General Topics] DJionut123:
I don't have any restrictions on downloading APKs on the device in question, so I don't need the work profile at all in this process.
[General Topics] bizkit_120:
I believe we are in same boat,look screenshot I attached above, company portal passed,but outlook detect Root... have you found anything solution?
[General Topics] TnargNaanac:
Yep, I've got the same screenshot. I'm currently on Magisk stable, but I've tried Alpha too, which for some reason ended up breaking my Systemless AdBlocking, but also did nothing to fix the situation. I was traveling for work when I happened to me a couple weeks ago, and I have had the same issue since. I don't get the "intune needs to be updated" error, and other non-Microsoft work apps in my work profile work.
[General Topics] bizkit_120:
I see , did you happen updated your outlook lately? I think newer version outlook somehow improved we can't trick this guy anymore with current magisk..

in my case, I used work apps few months back every works seamlessly, I somehow unregistered company portal due to battery draining issue, yesterday thought install again as I need to check email constantly... found out it no longer works, I did exactly same hiding steps... btw my system stays exactly identical no Google security update either. looks like only Microsoft app getting much intelligence 😂
[General Topics] morpheus133:
In the past comments it was written that the problem is not with outlook or teams.

New version of intune cause it.

If you downgrade the intune, both app will work. (Regardless of their version)
[General Topics] bizkit_120:
Which exactly inTune version I shall try? I believe I tested older version already.. same issue..

Also i don't understand as I mentioned it already passed company portal validations.

This one,

com.microsoft.windowsintune.companyportal_5.0.5926.0-6163266_minAPI26(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk
[General Topics] digger16309:
Intune 5541.0 works with A13 on a Pixel 6P w/ stock ROM, Magisk 26.3 stable-hidden, Shamiko, LSPosed, USNF, no work profile.

Don't assume InTune or the apps are detecting Magisk. It could be a number of different apps or changes that indicate the device is rooted.

Make sure when downgrading and trying different versions that cache and storage are cleared and reboot. Not doing so means you may have stumbled on the correct configuration but botched it.
[General Topics] DJionut123:
Ok so a short update, teams is now working, here is what I did.

Uninstalled all MS apps, including authenticator. Re-installed authenticator first, re-added my work account in authenticator scanning the barcode etc. I tried the old version of the apps but they didn't work, so I installed the latest Company Portal & Teams from the play store. Magisk with shamiko, added apps in deny list, LSPosed and HMA set up to hide apps via template, rebooted, and started w/ company portal. Manually synced, and once teams was installed, i also downloaded both certificates.

Starting teams i was stuck on the splash screen for a few minutes, kept closing the app and clearing cache to restrart, after a few tries it worked. LOGCAT was showing issues in the background call to intune, no idea why. When it finally started, i wasn't able to logon with my <user>@domain.com, or my mobile #, so I used my full email address. I was stuck on the "signing you in" for 2 minutes, LOGCAT was not showing any activity, so I killed Teams, and re-started. Got stuck on the "almost ready to go" screen, again killed, opened the app, and was prompted to authenticate via the authenticator app. Never saw that screen with the device health, don't know why, maybe because I killed the app while it appeared stuck.

Have not tried installing outlook yet, will leave things as they are for a few days to make sure Teams is working as per usual, then will install outlook.
[General Topics] trimax84:
5541 didn't work for me, said it was outdated or something like that.

However, in the process I force closed intune, cleared data, un-installed, restarted phone. Now I have 5926 clearing all checks after installing, force closing, clearing data, restarting phone and then logging in to intune.

It does seem like intune was my problem rather than a version of outlook (although I'm on outlook 2332.1).
[General Topics] ykjae:
With all these different answers which one is it? Can't we just figure out which activities, services, and receiver's to turn off while using app manager?

Right now I can use outlook but fail SharePoint, Word, Excel, and Teams. Company Portal registers fine.
[General Topics] paper88:
Hi Guys

In my Company we just need to download the Company Portal but we don't need to open it or log in to it. Outlook and Teams Recognize that the Portal is installed and I can login. After 5 Seconds I will be logged out because my Device is not safe. Anyone has experience with that scenario and how I could hide Magisk?
[General Topics] ykjae:
@GoodSoul I suggest we try this method which was brought to us in page 10 of this thread. I've been playing around with it and I bypass company portal for outlook and powerbi. No pin or anything.

SharePoint was working for a while until I tweaked some more settings.

Like everybody else I'm on CP 5.0.5926 with magisk canary, shamiko with everything properly blocked, lsposed with hma, play integrity fix.

@chiteroman I've even tried BootLoader Spoofer; when hooking into Company Portal or any Microsoft apps they hang on the splash screen and don't open. So I've unhooked them.

Now I've changed many settings in "App Manager" and am able to access almost all these apps but then receive an "unable to connect to network" pop up.

I suggest someone who has more knowledge in this field please look through App Manager and see what we can edit as far as activities, services, receivers to bypass.

In shared prefs there is even a value "prefer playinteg over safetynet'

App Manager - Android package manager (A full-featured open source package manager for android.)

https://f-droid.org/packages/io.github.muntashirakon.AppManager/

If anyone knows of someone who may be more knowledgeable please tag them. I've already reached out to the op of this app manager method and they said they no longer use company portal and are unable to experiment.
[General Topics] rockingondrums:
Hey everyone, jumping in to the fray because I've finally decided to try to have my root and work profile together. This is my first attempt at this. Has anyone tried using root app Island to create the work profile?
[General Topics] rockingondrums:
My work profile will boot me off if I leave USB debugging enabled. Try turning that off then either wait for the status to update or, if available like with my company, go to that MS web page portal and manually check compliance on the device.
[General Topics] rockingondrums:
How are you installing older versions to the Work profile? I sucessfully set up the work profile with current best practices and the Portal version advised, but now to install to Work Profile... Maybe I can use Island to sandbox the old Outlook/Teams if not in managed Work Profile.
[General Topics] bizkit_120:
Some of the folks here they don't need work profile..it means apps not in isolated container so that they easily installed older version apps.., in our case we can't sideload or down grade app..as work profile is under scrutiny by company, can't do anything..
[General Topics] sybor:
Hi,

I downgraded the intune app to the version 5.0.5926.0 and everything is working fine again:, link below: https://www.apkmirror.com/apk/micro...2/intune-company-portal-2-5-0-5926-0-release/

ofc, this is just a temporary solution, it's just a matter of time till we are forced to upgrade to latest version of intune.
[General Topics] 3liminate:
Anyone have a fix / know a version working for Outlook? My Teams app works with Intune Company Portal 5.0.5926.0. I've tried Outlook version 4.2332.1 but coming up with Health root detect error.
[General Topics] bizkit_120:
Believe you are having same issue, look #444 screenshot I posted
[General Topics] TnargNaanac:
Yep, so far I think there's two camps here, one where they do not have a work profile, and using an old version of intune works, and one where we have a work profile and downgrading does not work.
[General Topics] bizkit_120:
Exactly , some ppl bs here touted downgrade just install older version of company portal that's not the case in our situation....I think only solution Will be waiting shamiko new releases or other modules to address this issue.. giving up by now,I'm leveraging another unroot device access my company portal and Outlooks now
[General Topics] ykjae:
I feel like I'm in the 3rd camp. Old version of intune only works if I disable certain activities and services. And then it only works for outlook and SharePoint. Nothing else.

I'm running magisk alpha now, shamiko, play integ fix 8.6, hma - it seems so easy but I'm not understanding what's causing this.

I've tried to run displax usnf 2.0 instead of pif 8.6 and that also doesn't work.
[General Topics] digger16309:
BS? There are different configurations and implementations by company. Some use work profile, some not. Some force update through work profile, some not. Some MS apps call for a specific version of Intune, some not.

For example, no work profile for me and I can run Teams on older Intune but not One Drive.
[General Topics] Messatsu:
Guys, if it can help you, I played a bit with some LSPosed modules and unfortunately Teams Outlook etc. didn't work anymore.

So I uninstalled these modules and it's working again!

I think that the guilty one was "Disable FLAG SECURE".

Hope this message can help you.
[General Topics] bizkit_120:
can you be more specific uninstall what modules?
[General Topics] Messatsu:
The module that I had to uninstall was called "Disable FLAG SECURE". I advice you guys that have a problem with Intune detecting Root to uninstall 1 by 1 the LSPosed modules and to try again the steps (deleting Teams / Outlook / Intune cache / data), rebooting the device and trying again.

I was just trying to Disable / Deleting Magisk modules until I find that the issue was with a LSPosed module.
[General Topics] zgfg:
Did you put that module to the HMA template - all LSPosed modules installed to the phone must be in the HMA Blacklist template and Teams/Outlook must be enabled in HMA that root apps are hidden from them by use of HMA and that template
[General Topics] Messatsu:
Thanks for the tip, I don't have HMA installed.
[General Topics] bizkit_120:
Don't think disable flag cause the issue

My LSposted only have on module
[General Topics] ykjae:
I tried it because why not? I'm still getting device not compliant/device unhealthy.
[General Topics] DJionut123:
It's worth mentioning that this solution works for a day or so. After that, teams keeps flashing a white screen, and I cannot join any calls, while outlook doesn't refresh the inbox to see new emails.

In Logcat, the same message appears over and over:

"timeout executing service com.microsoft.teams/com.microsoft.intine.mam.clioent.service.mambackgroundjobservice"

I have also noticed that when I open teams / outlook after not using them for a while, I'm never asked to enter my pin / scan my fingerprint, which was the way things worked in the past. For some reason the failed call to intune prevents the authentication step from being triggered, and so the flashing white screen (at least this is what i deduce). I clear the storage and relog-on to teams, and then I'm ok for a day, it's annoying but it kind of works.
[General Topics] rockingondrums:
Actually, as it turns out, I didn't need to worry about that. I installed latest Microsoft Authenticator, the Intune versions suggested in a previous post, made sure to hide everything (all MS apps, even "Work Setup" and "Device Policy") but not enforce denylist (use Shamiko for that) with Displax USNF. Everything set up fine with whatever apps installed from Work Play Store. I did go in to settings to try and turn off anything remotely related to auto updating.

There is also another interesting setting I found that I asked an IT person about awhile ago (before rooting) because personal and work Google apps are connected (search "connected apps" in Settings, you'll find a section on "Connected work & personal apps". I was never informed about this and have disabled it ever sinceI found it. IT guy didn't know what it was about, maybe it's not even doing anything, but just to be safe it's turned off.

I'm happily rooted with working company apps.
[General Topics] bizkit_120:
Will try your suggestions.. thank you
[General Topics] ykjae:
Even on magisk alpha root is detected. I'm unsure what I'm doing wrong as I have everything hidden. I pass all app detection apps.. What is it that Microsoft apps are looking for?

So I've bypassed company portal at this point which I've mentioned before and can access my apps.. But it's bothering me wondering what isn't correct.
[General Topics] binoysankar:
Tried all the steps mentioned here and company portal is finding my device as unhealthy.

I think app has vast ways of detecting root from just check magisk app is installed to most of the validations mentioned here.
[General Topics] ykjae:
@binoysankar and anyone else that can't get it to work.

This is what I did. Not my method. I followed @Dev-iL guide on post #190

I also played around with the app ops and basically don't deny anything. Ignore seems fine. But I granted almost every permission since I'm using data isolation anyway

I'm not satisfied with this work around as I still see the error messages frequently. I usually just kill the app and go back into it and it will work. Don't log into company portal if possible.

Upsides is no pin to open apps.

Edit: I added a screenshot that displays all Microsoft app versions.

When I can replicate the errors I'll update again.
[General Topics] bayuesetiawan1:
Thank you for sharing the information on configuring 'Microsoft Intune' to work with 'Magisk'
[General Topics] Dev-iL:
It might be worth mentioning which version of the various apps you used (if it matters), or saying so if it doesn't.

The exact error message could also be useful, in case somebody wants to dig around the apk and patch it.
[General Topics] binoysankar:
Thank you. This method worked for me.
[General Topics] Dev-iL:
@ykjae

I see. I thought perhaps you experimented with some versions other (newer) than Apr 2022.
[General Topics] DJionut123:
Pardon my ignorance guys, but once all those above are de-activated, I simply launch the app from App Manager? I don't need to create a new package or anything like that? Reboot? I ask because I have tried switching those off, but teams gets stuck on the white splashscreen.
[General Topics] supermansaga:
Whatever solution is right now. Presumably they won't work in Android 14 requiring target level to be 33 or above?
[General Topics] Dev-iL:
@supermansaga what makes you say that?
[General Topics] jbradshw:
I'm trying to do what's suggested above but I'm unable to make any changes to the "Company Portal" app in the App Manager (the rest I'm able to). If I move the toggle to the left (someitmes it prompts me - I just choose Disable), I get a message at the bottom that says the rule was not applied.
[General Topics] supermansaga:
I am worried that the older Intunes/Microsoft apps might fail that level? I am seeing 33 for existing latest version
[General Topics] jbradshw:
I tried that as well and it still just flips everything back to it's original state.