yashsingh1/xdaforums huggingface dataset:
[Google Pixel 7 Pro] binoysankar:
I had issue with a specific banking app which detects root by most of the methods. I made it working by using shamiko + airfrozen which i was not really liking.

Now i wnded up with a forked project of magisk bu Husky called magisk delta which brought back magisk hide along with zygisk. With this i don't need shamiko, magiskpropshide, airfrozen or any modules for hiding the root from apps. Yes for safetynet you can use the modded veraion by D. Below is the link. If you are interested have a look at Magisk Delta by HuskyDG... I use the magisk delta canary builds...
[Google Pixel 7 Pro] p4ra:
I have made it work with first approach. I did a restart of the phone and it worked.

What I am wondering though is the following - I have used the VoLTE/VoWiFi/5G Magisk module, but I don't see the "HD" icon during the call, even though I can browse the internet (when I am not on WiFi). And despite 5G coverage of my current carrier in my area, I don't see 5G icon.

Is there any other module I am missing for this last piece of puzzle?

And last but not least. What scares me the most is that next OTA will completely screw me over after setting everything up. I wish there was a clear tutorial on how to OTA and keep the root without wiping everything out.
[Google Pixel 7 Pro] craigacgomez:
I'm not quite sure which VoLTE/VoWiFi/5G Magisk module you are referring to, but I believe enabling 5G requires modified mbn files specific to your country/region.

Regarding OTAs, there are two "How To" guides here with all the details you need.
[Google Pixel 7 Pro] znbaboy:
I have done exactly this but it still detects :(

Oneplus 7 pro

LineageOS 19.1 Nov 27th nightly build
[Google Pixel 7 Pro] craigacgomez:
This should be all that's needed to pass the compliance checks for Intune

1. Magisk (Zygisk mode)

2. SafetyNet v2.3.1-MOD_2.0

3. Shamiko v0.5.1 (or higher)

4. Magisk deny-list for the following apps (without Enforce deny-list)

a. Company Portal (Intune)​

b. Microsoft Authenticator (if you use it)​

c. Microsoft Defender (if you use it)​

5. Make sure you clear app data for the apps in the deny list after adding them to the deny list
[Google Pixel 7 Pro] s3axel:
Don't know about this specific app, but in the past I had issues with detection of an "unsecure" device, that was related to ADB debugging being enabled in developer settings...
[Google Pixel 7 Pro] znbaboy:
Still doesn't work. Its weird because it worked for one night and the next morning it stopped.

UPDATE: its LSPosed I think. But this is the only way to force dark mode on some apps....

UPDATE 2: I disabled forced dark mode on all Microsoft apps in LSPosed plugin and its looking good so far...

UPDATE 3: Had a full day with not a single root detection notification. Looks solid!
[Google Pixel 7 Pro] patrickdrd:
one of the worse parts of it, if not the worst, is that nobody knows what it detects and there's no guide that applies to each and every device,

I tried in 3 devices, the exact same steps and files, etc, it worked on the 1st one, but on the other two.. no!
[Google Pixel 7 Pro] s3axel:
For all those who still got issues as another idea: Does Google Wallet work ? Is the device play protect certified ?

I ask because to get Wallet to work (and presumably other apps that rely on Safetynet and/or Play Protect certification) the additional step after #5 in the list above is: clear data for Google Play Services and Google Play Store, then reboot (your device will ask for Google backup configuration again).....
[Google Pixel 7 Pro] Guido83:
I got the same issue with an App called "SwissID". It recognizes magisk for some reason. All other Apps work (like banking, google wallet etc.)
[Google Pixel 7 Pro] em2022:
Its work to me!!! Thanks
[Google Pixel 7 Pro] niciuffo:
Was wondering if you found a way to make SwissID work? I have tried the suggestions in this and other threads but no matter what I do, the app recognizes Magisk and closes on start.
[Google Pixel 7 Pro] Guido83:
No I couldn't get it working
[Google Pixel 7 Pro] otonieru:
use HideMyAppList and IAmNotADeveloper modules.
[Google Pixel 7 Pro] Guido83:
I tried those apps as well (and still using them) but for the swissID app they don't work anyway.
[Google Pixel 7 Pro] nri_tech1183:
Not working at all here!
[Google Pixel 7 Pro] znbaboy:
UPDATE: hmm. I haven't gotten root detection error from the apps for a while now. Cant remember if it happened before i updated magisk or after. I am currently using the latest Magisk canary build + enforce zygisk list + universal SafetyNet fix by kdrag0n. Will report back if it detects again.

UPDATE 2: yeah nvm, i got root detection again. I noticed it didn't happen until i signed into the Microsoft 365 app (office 365). May be just a coincidence though.

UPDATE 3: i think canary magisk was the issue. Shamiko is working again

----------------------------------------------------------------------

Shamiko has stopped working for me :(

When you have it installed and activated, outlook and teams seem to crash immediately after launching them. Rip

What works for me now is having SafetyNet fix + Shamiko disabled/uninstalled + Enforce Zygisk list enabled. Then everytime my apps detect root, i use a script to force close and clear all cache on Microsoft apps. Then it works again for a little bit until it detects root again.

Here is the script for anyone interested (use at your own risk):

am force-stop com.microsoft.office.outlook
am force-stop com.microsoft.office.officehubrow
am force-stop com.microsoft.teams
am force-stop com.microsoft.windowsintune.companyportal

cd ~/data/data/com.microsoft.office.outlook && rm -rf cache
cd ~/data/data/com.microsoft.office.officehubrow && rm -rf cache
cd ~/data/data/com.microsoft.teams && rm -rf cache
cd ~/data/data/com.microsoft.windowsintune.companyportal && rm -rf cache
[Google Pixel 7 Pro] HiM@L:
anyone able to make this work?
[Google Pixel 7 Pro] straumli:
I am facing the same issues, root continues to get detected
[Google Pixel 7 Pro] linuxares:
Tried Magisk Delta?
[Google Pixel 7 Pro] bihariel:
Working solution:

I followed this tutorial here and it works like a charm for me.

https://github.com/adrianmmiller/Hide-My-Applist-Guide

I'm using Magisk 25.2 + shamiko +universal safety fix + Zygisk lsposed + Hide my Applist

Don't forget to also hide Magisk app.

To check for root detection, use this apo called Ruru. Tells you about detected root related stuff. Add it to hide my Applist and check if you get all checks like in the screenshot. It's fine if it still detects the HMApplist app or the hidden magisk package name. Root will be hidden perfectly for the apps you mention.

I use Intune, Outlook, teams and Microsoft 365. All working fine without ever detecting root.

Also banking apps working fine.
[Google Pixel 7 Pro] lesafijndt:
Can anyone confirm bihariel's method is working? Thinking about rooting, but if there are going to be issues with the intune/teams and so on, I'll have to pass.
[Google Pixel 7 Pro] skyraven83:
@Guido83 did you make Swissid work somehow ?

Did anyone manage to get it working ?
[Google Pixel 7 Pro] usadream:
no luck with swissid either here, any success on ur end?
[Google Pixel 7 Pro] ForForkSake:
Here is how I have currently acheived it on the 7

Pixel 7 (Panther)

- Android 13 May 23 security patch - TQ2A.230505.002

Magisk Canary Official 26102 - Unlocked bootloader, flashed magisk patched init_boot.img from fw named above

Enabled Zygisk

Hide the Magisk app (I reinstalled as "SettingsMA")

Configure DenyList (all work profile apps) ie. company portal / teams / outlook - I simply searched for "Microsoft" "Azure" & then "Office" , oh and personally I also hide google wallet

Do not enforce DenyList

Cleared storage of teams and outlook apps

LSPosed-v1.8.6-6712-zygisk-release.zip reboot

LSPosed v 1.8.6 6901 zygisk release.zip reboot

safetynet-fix-v2.4.0-MOD_1.2.zip Displax Mod reboot

Shamiko-v0.7.3-174-release.zip reboot

IAmNotADeveloper 1.0.2 - Installed apk and enabled in LSPosed against company portal / office 365 / authenticator within lsposed select this app and choose install to work profile, ignore the warning, lsposed now has a work profile tab to load it against all of the apps

Other module(s) installed without a direct impact

AOSPMods-253.zip Canary - update to canary from within app/updates section of standard release AOSP mods

Substratum and Liv Dark theme from playstore

Update : root is sometimes detected when I click a link. I will investigate later but I am assuming it's a process linked to edge browser that I haven't added to deny list.

Until I click a link email and teams work perfectly.
[Google Pixel 7 Pro] skyraven83:
does this work for the new Postfinance app too?

I just saw that my old trick with having Magisk renamed does not work anymore. Not sure what they changed in the way they do root detection.
[Google Pixel 7 Pro] gj4560:
Hi all, I have a Pixel 7 Pro rooted with Magisk 26.1 on the stock July firmware. I am unable to pass the Intune Company Portal root detection which means I cannot access my work's Teams, no matter what I try. I am using Displax's mod of Universal SafetyNet Fix as well as Shamiko (0.7.3) and LSPosed/Hide My Applist. I have set up HMA with the correct template (and applied the template to Teams/ICP) to hide all traces of Magisk as well as any root/LSPosed apps and modules and I've added ICP and Teams to the Magisk deny list but no matter what, ICP will not let me use Teams as it says I am using a rooted device. I've tried multiple reinstalls of Teams and ICP, device reboots, etc to no avail. Using the "Applist Detector" app offered by the HMA devs shows ticks on all categories, indicating nothing is found. If anyone has any idea on what I need to do to try and pass the check, it will be greatly appreciated, thanks :)
[Google Pixel 7 Pro] lowik2:
Unroot the device or get another phone as work phone, it will always cause problems I gave up and have another phone for wrk
[Google Pixel 7 Pro] shivam0909:
If possible can you try switching to Magisk Delta? It has Magisk Hide. Uninstall the Intune Portal App, switch to Magisk Delta, install Intune Portal. Don't open it yet. Add intune portal, teams etc to the hidelist along with google play store and play services. Once hidden, try opening it. Should work. Works for me. Let me know if you need anything.
[Google Pixel 7 Pro] haroonasla:
Is anyone facing issues with intune portal post latest update of intune portal on playstore ? Mine is now detecting root. previous version was ok.
[Google Pixel 7 Pro] demonjrules:
Yup. Updated everything from the Play Store last night and I cannot open Teams or Outlook today
[Google Pixel 7 Pro] flbenini:
Also getting the same issue. It's detecting root as of today. Tried to reinstall magisk (now v26.3), update shamiko with no luck. If anyone figure it out please let us know.
[Google Pixel 7 Pro] znbaboy:
Yup same happens to me. I just downgrade my intune app to one version before and blocked updates for the app from showing up in the play store using

Update Locker: stop update your apps

Stop update your apps

modules.lsposed.org
[Google Pixel 7 Pro] re_endymion:
Same thing here
[Google Pixel 7 Pro] re_endymion:
Can you share the intune previous version that you are running ? Any idea where we can get it ?

Thanks for the updatelocker trick
[Google Pixel 7 Pro] znbaboy:
Intune Company Portal 5.0.5975.0 APK Download by Microsoft Corporation - APKMirror

Intune Company Portal 5.0.5975.0 APK Download by Microsoft Corporation - APKMirror Free and safe Android APK downloads

www.apkmirror.com
[Google Pixel 7 Pro] re_endymion:
Thanks znbaboy.

I confirm, that Outlook and Teams work perfectly without root detection.
[Google Pixel 7 Pro] haroonasla:
not working anymore. something else might have been updated as well yesterday
[Google Pixel 7 Pro] haroonasla:
actually same setup (older version) after a restart stops working also. Authenticator app is also updated by Microsoft.
[Google Pixel 7 Pro] JohnX800:
I facing same issue today, after I rollback Intune Company Portal app back to v5.0.5975, it works now.
[Google Pixel 7 Pro] Dracozirion:
Magisk Delta user here. Only Teams is detected since earlier this week, Outlook still working fine.
[Google Pixel 7 Pro] re_endymion:
After following the znbaboy recommendations, it no longer works since yesterday for both Teams and Outlook :(
[Google Pixel 7 Pro] znbaboy:
it still works for me. check to make sure your intune app didnt update itself through the playstore. you may have not configured the update blocker LSPosed module correctly (i made this mistake myself).

You need to enable the update blocked module and make sure the Play Store is selected. Then, you hold on the module entry in LSPosed, press "Module Settings", turn it on, and add Company Portal to the list.
[Google Pixel 7 Pro] :
Thank you so much. It worked.
[Google Pixel 7 Pro] countbuggula:
Can you share the rest of your setup that you get this working with? I'm using Magisk Delta, ICP v5.0.5975, Update locker, HMA, IamNotADeveloper, and everything passes on Applist Detector and Ruru. I've even tried turning off developer settings.

Still can't pass the check on Company Portal.
[Google Pixel 7 Pro] znbaboy:
as stated previously, the latest version of the Company Portal app WILL detect root. You have to use the older version found here: https://www.apkmirror.com/apk/micro...2/intune-company-portal-2-5-0-5975-0-release/
[Google Pixel 7 Pro] countbuggula:
I just said I'm using that version.
[Google Pixel 7 Pro] znbaboy:
never heard anyone call it ICP. just uninstall all your apps including company portal. reinstall company portal and configure it, then install everything else. also make sure you are using shamiko
[Google Pixel 7 Pro] countbuggula:
So you're using Magisk + Shamiko instead of Magisk Delta? That's what I started with but when I couldn't get it to work I switched to Delta. I'll try vanilla Magisk again.
[Google Pixel 7 Pro] re_endymion:
Thank you again for your explanations. I hadn't configured the update blocked module the right way.
[Google Pixel 7 Pro] androidx219:
In my case, (Galaxy F62),

It didn't work despite installing Shamiko.

My other root apps were working fine except YASNAC was detecting CTS profile match not healthy (Basic integrity was passed though)

After several failed attempts I managed to achieve CTS profile match healthy tick. Safetynetfix by Displax did the job for me.

I didn't do much experimentations. I installed Company portal app release in the month of June as latest ones were detecting root previously. All other Microsoft apps - outlook, teams, onedrive etc. are the latest versions. Cleared data/cache from all these apps and configured them in denylist again.

So far it's working for me since last 4 days.

You should check your CTS profile match status in YASNAC app.

UPDATE 1: For some reason I could not install the update blocker module. Hence, intune updated itself to the latest version 2 days back but no issues of root detection so far 👍 even with all latest versions of Microsoft apps. The latest safetynetfix module appears to be the saviour.
[Google Pixel 7 Pro] Harshatxda:
Guys updated hiding patch
[Google Pixel 7 Pro] Harshatxda:
I would say very simple very straight. Let's go with this magisk replacement ksu root. So simple 2 mins and everything hidden.

Release v0.6.8 · tiann/KernelSU

[Module] Fixed an issue that caused all modules to disappear after the installation of some modules failed. [Manager] Fixed the problem of incorrect module file name when updating modules. [Manager...

github.com
[Google Pixel 7 Pro] D4Dynamo:
Will this module fix Intune Company Portal latest update or older versions only?

I tried to setup with older Intune Company Portal version per above thread - it works for some time then it auto update to latest version itself and stop working.

Could you please share list of needed modules to fix latest Intune Company Portal?

Or stop Intune auto updates?

I am using below modules now:

1) safetynetfix-v2.4.0-MOD-2.0-zip

2) shamiko v0.7.3

3) MagiskHide Props config v6.1.2-v137

4) Intune Company Portal v5.0.5998.0
[Google Pixel 7 Pro] androidx219:
That's strange because I have the same configuration but it works for me. Shamiko didn't work for me. I started with older version of Intune Company Portal but as update blocker modules didn't work for me, intune updated itself to the latest version but everything still works for me without any issues. Did your device pass the YASNAC - CTS profile match test? I am attaching my modules list.
[Google Pixel 7 Pro] D4Dynamo:
Yes, working for now with older Intune v5.0.5975 and these modules.

If Intune get auto Update to latest version in background again then it will stop working.

I'll update if that happens again.

Thanks for sharing modules list.
[Google Pixel 7 Pro] binoysankar:
Hi Everyone, I made it work following this method - https://xdaforums.com/t/tutorial-ro...h-magisk-update-q3-2023.4402273/post-87619685
[Google Pixel 7 Pro] znbaboy:
can confirm this method worked perfectly for me on the latest company portal app. i still have shamiko and zygisk hide configured on all my microsoft apps also just in case. i added all the same settings used for Teams, on Outlook and M365 app and it seems to work
[Google Pixel 7 Pro] labbala:
have Samsung Galaxy S23 Plus.

Using company portal app v5.0.6060.0 (as for this post date latest)

have all installed latest versions to this post date (29 Nov. 20203):

Magisk Delta + hide all needed apps (fully expended each) - without Enforce deny-list

installed Shamiko

play integrity fix

passed basic integrity and device integrity

deleted cache and data for Play store and Play Services

rebooted the phone

company portal after login give message with title:

"Can't create work profile"

with message content:

"The security policy prevents the creation of a work profile because a custom OS has been installed on this device"

didn't found a way to make this work ..
[Google Pixel 7 Pro] realhuseyn:
Hello. Currently, I cannot use Outlook with this version 2.5.0.5975. The app tells me "This app could not be launched because the Company Portal app on your device is out of date. To fix this problem, install the latest version of the Company Portal". What can I do? I think that if I update the version of the Company Portal, I can't use it (Teams, etc)
[Google Pixel 7 Pro] reg66:
So i've only just seen this thread... thought i would try it all out for you using my current setup... All working fine here (latest intune company portal app and latest outlook) on the 1st attempt. I am rooted using a specific method that has lasted me for a long time without issue (latest Barclays versions have caused major headache in the past).

Would you like me to share exactly what i have done or have you fixed your issue now??

Side note: at what point does the company portal app kick you out or recognise root? - i don't have an active account to take the sign in process any further, but i can get to the sign in screen. I have signed into outlook without issue, though...
[Google Pixel 7 Pro] realhuseyn:
Thank you for your response. I have still this issue. Did you log in with your work email or personal email to the Company Portal? If you can open Outlook, Teams, or Edge with the Company Portal, everything is okay.

My last attempt was in October, I had installed the latest version of the Company Portal. When I opened Outlook or Teams, it showed me like red "Device is healthy" (in the screenshot). I have tried some ways, but I couldn't solve it. Then, I found the solution in this forum, I downloaded an older version of the Company Portal (2.5.0.5975), and it began to work normally. But I can't open Outlook for a week, it tells me I must update the version of the portal. Therefore, I think that if I update the version of the Company Portal, I can't use it.
[Google Pixel 7 Pro] reg66:
Sorry for the late reply, went off-radar yesterday!

Can I just log into company portal using my regular email or must i have an actual account pre-registered? (i have no associated account with that app, i don't normally use it... just checking for you)

EDIT: nevermind, can't sign in with personal email and my company doesn't use that app/portal. But, in the next post i'll provide instructions for you to try...
[Google Pixel 7 Pro] reg66:
Use files from this link for the following instructions

So... Try this... You'll need to uninstall magisk, whichever version you are using and flash/install the one provided in the link (Magisk Alpha - not to be confused with an alpha version of the original, this version is a fork of the original). I've had issues with numerous apps detecting root in the past, including Barclays UK banking app, but this fork of Magisk really rocks!

1. Flash Magisk Alpha provided in link and install the app.

2. Hide the app itself (I call mine Dunkin Donut, rather than the standard 'settings' - not that that should make a difference).

3. Enable Zygisk

4. Flash the two modules also induded in the shared link and reboot between each flash (Shamiko v0.7.5 and Universal SafetyNet Fix v2.4.0-MOD 2.0 - by @Displax)

5. Configure deny list as per the screen shot attached to include all Google parts [ensuring all corresponding tick boxes are ticked for each app, as per screenshot] along with any other apps you need hidden ie Company Portal, Teams, Outlook etc etc.

6. Go to settings/apps/all apps (3 dot menu, top right, 'Show system apps' also) and clear cache and data for Google parts (Google Play Protect Services, Google Play Services, Google Play Store and Google Services Framework) along with cache and data for all your required apps (Company Portal, Teams, Outlook and Edge).

7. Reboot phone

8. That's it. Now try signing in to Comp. Portal, Outlook etc and, fingers crossed, it will all work fine. Good luck.

IF that doesn't work...

Try uninstalling Comp. Portal, Teams, Outlook, Edge - any of your Microsoft apps.

Then follow again from step 6 and clear cache/data again (but obviously the Microsoft apps will be missing at this stage).

Reboot phone

Re-install your Microsoft apps from newly 'cleaned' Play Store. DON'T open them yet.

Hide all parts of them in Magisk Hide Deny list.

Now try signing in and using Comp. Portal etc
[Google Pixel 7 Pro] realhuseyn:
Thank you so much for the detailed answer. But I have a little question. I also am not using generic Magisk, I am using Magisk Delta v25.2. Is it okay to follow your instructions? or must I install Magisk Alpha? Magisk Delta is working normally on my device
[Google Pixel 7 Pro] reg66:
To follow the instructions completely you would need to uninstall Magisk Delta completely and start a fresh using the one I have linked to, then the rest of the instructions
[Google Pixel 7 Pro] reg66:
Dude, so sorry to mess you around... I have found using the updated Magisk Alpha 26.403, Shamiko v0.7.5-194 and USF v2.4.0 MOD 2.0, updated in link, to work better at hiding root. All newer modules appear compatible now, whereas before there was some issues.

If you're up for it you can try again using latest files.

As a side note... Are you running stock rom or custom and which version, is it the latest? Basically, for my rom as example (latest EvoX) the fingerprint used in the built in play integrity fix has been blocked. Which affects some apps such as GPay/Google Wallet and causes them to not work. Perhaps your rom is out of date using an old fingerprint.

You can check if your device meets Device Certification by going to Playstore/settings/About. If there is no statement saying 'Device is not certified', then you should be good to go. That said, I'm not sure if Comp. Portal/Teams etc use that same method of detection but if they do, that could well be your issue.

Using the updated files linked previously and an updated Play Integrity Fix you shouldn't/hopefully won't find any issue with root and those Microsoft apps, and GPay if you use that