Question Company Portal (InTune) detects root - anyone else?

[niciuffo]

I got the same issue with an App called "SwissID". It recognizes magisk for some reason. All other Apps work (like banking, google wallet etc.)

Was wondering if you found a way to make SwissID work? I have tried the suggestions in this and other threads but no matter what I do, the app recognizes Magisk and closes on start.

 

[Guido83]

Was wondering if you found a way to make SwissID work? I have tried the suggestions in this and other threads but no matter what I do, the app recognizes Magisk and closes on start.

No I couldn't get it working

 

[otonieru]

I got the same issue with an App called "SwissID". It recognizes magisk for some reason. All other Apps work (like banking, google wallet etc.)

use HideMyAppList and IAmNotADeveloper modules.

 

[Guido83]

use HideMyAppList and IAmNotADeveloper modules.

I tried those apps as well (and still using them) but for the swissID app they don't work anyway.

 

[nri_tech1183]

Still doesn't work. Its weird because it worked for one night and the next morning it stopped.

UPDATE: its LSPosed I think. But this is the only way to force dark mode on some apps....

UPDATE 2: I disabled forced dark mode on all Microsoft apps in LSPosed plugin and its looking good so far...

UPDATE 3: Had a full day with not a single root detection notification. Looks solid!

Not working at all here!

 

[znbaboy]

UPDATE: hmm. I haven't gotten root detection error from the apps for a while now. Cant remember if it happened before i updated magisk or after. I am currently using the latest Magisk canary build + enforce zygisk list + universal SafetyNet fix by kdrag0n. Will report back if it detects again.

UPDATE 2: yeah nvm, i got root detection again. I noticed it didn't happen until i signed into the Microsoft 365 app (office 365). May be just a coincidence though.

UPDATE 3: i think canary magisk was the issue. Shamiko is working again

----------------------------------------------------------------------

Shamiko has stopped working for me

When you have it installed and activated, outlook and teams seem to crash immediately after launching them. Rip

What works for me now is having SafetyNet fix + Shamiko disabled/uninstalled + Enforce Zygisk list enabled. Then everytime my apps detect root, i use a script to force close and clear all cache on Microsoft apps. Then it works again for a little bit until it detects root again.

Here is the script for anyone interested (use at your own risk):

am force-stop com.microsoft.office.outlook
am force-stop com.microsoft.office.officehubrow
am force-stop com.microsoft.teams
am force-stop com.microsoft.windowsintune.companyportal

cd ~/data/data/com.microsoft.office.outlook && rm -rf cache
cd ~/data/data/com.microsoft.office.officehubrow && rm -rf cache
cd ~/data/data/com.microsoft.teams && rm -rf cache
cd ~/data/data/com.microsoft.windowsintune.companyportal && rm -rf cache

 

[HiM@L]

anyone able to make this work?

 

[straumli]

I am facing the same issues, root continues to get detected

 

[linuxares]

Tried Magisk Delta?

 

[bihariel]

Working solution:
I followed this tutorial here and it works like a charm for me.
https://github.com/adrianmmiller/Hide-My-Applist-Guide

I'm using Magisk 25.2 + shamiko +universal safety fix + Zygisk lsposed + Hide my Applist

Don't forget to also hide Magisk app.

To check for root detection, use this apo called Ruru. Tells you about detected root related stuff. Add it to hide my Applist and check if you get all checks like in the screenshot. It's fine if it still detects the HMApplist app or the hidden magisk package name. Root will be hidden perfectly for the apps you mention.

I use Intune, Outlook, teams and Microsoft 365. All working fine without ever detecting root.
Also banking apps working fine.

 

[lesafijndt]

Can anyone confirm bihariel's method is working? Thinking about rooting, but if there are going to be issues with the intune/teams and so on, I'll have to pass.

 

[skyraven83]

@Guido83 did you make Swissid work somehow ?
Did anyone manage to get it working ?

 

[usadream]

@Guido83 did you make Swissid work somehow ?
Did anyone manage to get it working ?

no luck with swissid either here, any success on ur end?

 

[CFKod]

Here is how I have currently acheived it on the 7


Pixel 7 (Panther) - Android 13 May 23 security patch - TQ2A.230505.002

• Magisk Canary Official 26102 - Unlocked bootloader, flashed magisk patched init_boot.img from fw named above
• Enabled Zygisk
• Hide the Magisk app (I reinstalled as "SettingsMA")
• Configure DenyList (all work profile apps) ie. company portal / teams / outlook - I simply searched for "Microsoft" "Azure" & then "Office" , oh and personally I also hide google wallet
• Do not enforce DenyList
• Cleared storage of teams and outlook apps
• LSPosed-v1.8.6-6712-zygisk-release.zip reboot
• LSPosed v 1.8.6 6901 zygisk release.zip reboot
• safetynet-fix-v2.4.0-MOD_1.2.zip Displax Mod reboot
• Shamiko-v0.7.3-174-release.zip reboot
• IAmNotADeveloper 1.0.2 - Installed apk and enabled in LSPosed against company portal / office 365 / authenticator within lsposed select this app and choose install to work profile, ignore the warning, lsposed now has a work profile tab to load it against all of the apps

Other module(s) installed without a direct impact

• AOSPMods-253.zip Canary - update to canary from within app/updates section of standard release AOSP mods
• Substratum and Liv Dark theme from playstore

Update : root is sometimes detected when I click a link. I will investigate later but I am assuming it's a process linked to edge browser that I haven't added to deny list.
Until I click a link email and teams work perfectly.

 

[skyraven83]

Here is how I have currently acheived it on the 7


Pixel 7 (Panther) - Android 13 May 23 security patch - TQ2A.230505.002

• Magisk Canary Official 26102 - Unlocked bootloader, flashed magisk patched init_boot.img from fw named above
• Enabled Zygisk
• Hide the Magisk app (I reinstalled as "SettingsMA")
• Configure DenyList (all work profile apps) ie. company portal / teams / outlook - I simply searched for "Microsoft" "Azure" & then "Office" , oh and personally I also hide google wallet
• Do not enforce DenyList
• Cleared storage of teams and outlook apps
• LSPosed-v1.8.6-6712-zygisk-release.zip reboot
• LSPosed v 1.8.6 6901 zygisk release.zip reboot
• safetynet-fix-v2.4.0-MOD_1.2.zip Displax Mod reboot
• Shamiko-v0.7.3-174-release.zip reboot
• IAmNotADeveloper 1.0.2 - Installed apk and enabled in LSPosed against company portal / office 365 / authenticator within lsposed select this app and choose install to work profile, ignore the warning, lsposed now has a work profile tab to load it against all of the apps

Other module(s) installed without a direct impact

• AOSPMods-253.zip Canary - update to canary from within app/updates section of standard release AOSP mods
• Substratum and Liv Dark theme from playstore

Update : root is sometimes detected when I click a link. I will investigate later but I am assuming it's a process linked to edge browser that I haven't added to deny list.
Until I click a link email and teams work perfectly.

Here is how I have currently acheived it on the 7


Pixel 7 (Panther) - Android 13 May 23 security patch - TQ2A.230505.002

• Magisk Canary Official 26102 - Unlocked bootloader, flashed magisk patched init_boot.img from fw named above
• Enabled Zygisk
• Hide the Magisk app (I reinstalled as "SettingsMA")
• Configure DenyList (all work profile apps) ie. company portal / teams / outlook - I simply searched for "Microsoft" "Azure" & then "Office" , oh and personally I also hide google wallet
• Do not enforce DenyList
• Cleared storage of teams and outlook apps
• LSPosed-v1.8.6-6712-zygisk-release.zip reboot
• LSPosed v 1.8.6 6901 zygisk release.zip reboot
• safetynet-fix-v2.4.0-MOD_1.2.zip Displax Mod reboot
• Shamiko-v0.7.3-174-release.zip reboot
• IAmNotADeveloper 1.0.2 - Installed apk and enabled in LSPosed against company portal / office 365 / authenticator within lsposed select this app and choose install to work profile, ignore the warning, lsposed now has a work profile tab to load it against all of the apps

Other module(s) installed without a direct impact

• AOSPMods-253.zip Canary - update to canary from within app/updates section of standard release AOSP mods
• Substratum and Liv Dark theme from playstore

Update : root is sometimes detected when I click a link. I will investigate later but I am assuming it's a process linked to edge browser that I haven't added to deny list.
Until I click a link email and teams work perfectly.

does this work for the new Postfinance app too?

I just saw that my old trick with having Magisk renamed does not work anymore. Not sure what they changed in the way they do root detection.

 

[gj4560]

Hi all, I have a Pixel 7 Pro rooted with Magisk 26.1 on the stock July firmware. I am unable to pass the Intune Company Portal root detection which means I cannot access my work's Teams, no matter what I try. I am using Displax's mod of Universal SafetyNet Fix as well as Shamiko (0.7.3) and LSPosed/Hide My Applist. I have set up HMA with the correct template (and applied the template to Teams/ICP) to hide all traces of Magisk as well as any root/LSPosed apps and modules and I've added ICP and Teams to the Magisk deny list but no matter what, ICP will not let me use Teams as it says I am using a rooted device. I've tried multiple reinstalls of Teams and ICP, device reboots, etc to no avail. Using the "Applist Detector" app offered by the HMA devs shows ticks on all categories, indicating nothing is found. If anyone has any idea on what I need to do to try and pass the check, it will be greatly appreciated, thanks

 

[lowik2]

Unroot the device or get another phone as work phone, it will always cause problems I gave up and have another phone for wrk

 

[shivam0909]

Hi all, I have a Pixel 7 Pro rooted with Magisk 26.1 on the stock July firmware. I am unable to pass the Intune Company Portal root detection which means I cannot access my work's Teams, no matter what I try. I am using Displax's mod of Universal SafetyNet Fix as well as Shamiko (0.7.3) and LSPosed/Hide My Applist. I have set up HMA with the correct template (and applied the template to Teams/ICP) to hide all traces of Magisk as well as any root/LSPosed apps and modules and I've added ICP and Teams to the Magisk deny list but no matter what, ICP will not let me use Teams as it says I am using a rooted device. I've tried multiple reinstalls of Teams and ICP, device reboots, etc to no avail. Using the "Applist Detector" app offered by the HMA devs shows ticks on all categories, indicating nothing is found. If anyone has any idea on what I need to do to try and pass the check, it will be greatly appreciated, thanks

If possible can you try switching to Magisk Delta? It has Magisk Hide. Uninstall the Intune Portal App, switch to Magisk Delta, install Intune Portal. Don't open it yet. Add intune portal, teams etc to the hidelist along with google play store and play services. Once hidden, try opening it. Should work. Works for me. Let me know if you need anything.

 

[haroonasla]

Is anyone facing issues with intune portal post latest update of intune portal on playstore ? Mine is now detecting root. previous version was ok.

 

[demonjrules]

Is anyone facing issues with intune portal post latest update of intune portal on playstore ? Mine is now detecting root. previous version was ok.

Yup. Updated everything from the Play Store last night and I cannot open Teams or Outlook today