[MODULE] Microsoft Intune Company Portal Hider (Intune Hider)

[dmbardal]

Trying to get this to work, but its really hard to read when the instructions have capitalized letters for every word.
I've seriously been trying for an hour now.

I appreciate the guide, but geez.

 

[panpan1]

I am receiving the exact same error. Did you ever get this resolved?

Hi All,

I also get the "custom OS error" (while I have a stock rom) and apparently there were no feedback to explain how to solve it
Did somebody found the solution, I try to make it work for more than 1 week and become crazy
Thanks in advance

 

[}{Alienz}{]

Works on latest Magisk 20.4 on my OnePlus 7 Pro (Android 10). No need for special packages or crazy setup. Use the integrated Magisk hide feature.
Steps taken

-root device
-Hide magisk manager
-Install Intune and outlook. (do not run)
- Open Magisk and find the Magisk hide app list. Checkmark intune (it's called Company Portal) and Outlook. Make sure to CHECKMARK every part of the app...there's multiple parts when you click the app name in the list.
(if previously installed: wipe data+cache from intune and outlook)
Setup intune
Setup outlook

 

[jesterpaul]

Works on latest Magisk 20.4 on my OnePlus 7 Pro (Android 10). No need for special packages or crazy setup. Use the integrated Magisk hide feature.
Steps taken

-root device
-Hide magisk manager
-Install Intune and outlook. (do not run)
- Open Magisk and find the Magisk hide app list. Checkmark intune (it's called Company Portal) and Outlook. Make sure to CHECKMARK every part of the app...there's multiple parts when you click the app name in the list.
(if previously installed: wipe data+cache from intune and outlook)
Setup intune
Setup outlook

I wish this still worked for me, but it does not.


I have a Sammy Galaxy S20 Ultra 5G user. Run stock firmware but I have unlocked the bootloader so the knox fuse has been tripped.

I have magisk canary installed. I hide magisk manager and use magisk hide on numerous apps including Intune Company Portal, and it used to work with basic attestation with your method.

My device started failing safety net when Google updated it to using hardware attestation (as is inevitable).

I have installed magic props config magisk module and run the force basic attestation props command, and with this my device passes safety net again.

I am successfully running several apps that would not work on rooted devices with this set of workarounds.

ThreeNow (New Zealand TV app)
Ramco Unify
Microsoft Authenticator
McDonald's app

However I cannot fool Intune Company Portal, meaning I can't use any apps that allow me to connect to my work Office 365 accounts and services, such as Outlook for my work email, Skype for Business, Microsoft Teams and others.

Has anyone found a way to cloak root for Intune Company Portal with Google having updated to hardware attestation?

 

[johnnyjoejoejr]

I tried for weeks to get this to work without success, until I reached out to my workplace IT team. I had them re-enter my IMEI number for both sim card slots, and it finally worked!

 

[amplatfus]

I tried for weeks to get this to work without success, until I reached out to my workplace IT team. I had them re-enter my IMEI number for both sim card slots, and it finally worked!

Hi,
Pleae, you have the setup with Work Profile?

Thank you!

 

[CFKod]

Works on latest Magisk 20.4 on my OnePlus 7 Pro (Android 10). No need for special packages or crazy setup. Use the integrated Magisk hide feature.
Steps taken

-root device
-Hide magisk manager
-Install Intune and outlook. (do not run)
- Open Magisk and find the Magisk hide app list. Checkmark intune (it's called Company Portal) and Outlook. Make sure to CHECKMARK every part of the app...there's multiple parts when you click the app name in the list.
(if previously installed: wipe data+cache from intune and outlook)
Setup intune
Setup outlook

I dont even hide magisk manager... Ever

Happily used for months now. It relies heavily on safetynet passing so thats the where most peoples issue probably lay.

The evox rom i am using has always passed safetynet - i did try a different kernel which caused safetynet to fail and the device became non compliant... Back to stock kernel from rom.... Passsed safetynet device compliant again.

 

[logitek1994]

Works on latest Magisk 20.4 on my OnePlus 7 Pro (Android 10). No need for special packages or crazy setup. Use the integrated Magisk hide feature.
Steps taken

-root device
-Hide magisk manager
-Install Intune and outlook. (do not run)
- Open Magisk and find the Magisk hide app list. Checkmark intune (it's called Company Portal) and Outlook. Make sure to CHECKMARK every part of the app...there's multiple parts when you click the app name in the list.
(if previously installed: wipe data+cache from intune and outlook)
Setup intune
Setup outlook

Wooowww thank you so much!!! I can't pass the root check when login to microsoft teams, and when i do wipe data + cache (bcs it has previously installed) it works!!!! I never thought that delete all data + cache is so much powerful than uninstall + reinstall. Thank you so much maannnn?????

Update: well, not for long. Just 5 minutes later and the error is showing up again

 

[SolarPlexus]

could it be, that intune is hidden in a specific way in the Apps list of Magisk manager? I could not find it under every possible name I checked (Intune, Unternemen, Company, Microsoft)... Unfortunatly it looks like the Root check was improved, because yesterday it still works, but today Outlook is no longer syncing...

 

[[deXter]]

@}{Alienz}{'s solution still works for me. I switched to a new ROM yesterday (clean install) and was having issues setting up Teams and Outlook (Company Portal was detecting root) until I came across this thread and followed }{Alienz}{'s solution. Took a couple of tries but what got it working in the end was to ensure I force-closed ALL Microsoft apps (Company Portal, Authenticator, Teams, Outlook, Skype for Business, OneDrive) and then cleared ALL their respective Storage+Caches. Then I set up Authenticator again, didn't touch Company Portal, then set up Teams, Outlook etc and it's been working fine. Device has been running for almost a full work day now without any issues.

I'm on Android 11 (PiXeN-OS) patched to November 2020, on a OnePlus 6. I'm using Magisk 21.1 (MagiskHide enabled + Magisk package renamed) and I don't have any other modules MagiskHidePropsConfig/Riru/Xposed etc installed, for now anyway.

I'll monitor and update this post if the situation changes.

If any of you have issues, can you please mention your:

- Device make/model/variant
- Android OS version, Security Patch Level and ROM (if using a custom ROM)
- Magisk version
- Any other mods/root apps installed (Riru/Xposed etc)

 

[ShivamOnline]

Can you please update, if it is still working or not.
If Yes, please mention all the steps followed or Quote the Post where you followed it from.

I had to remove Magisk to get these apps working again.
Tried all the mentioned tricks.

Thanks

 

[casouzaj]

Can you please update, if it is still working or not.
If Yes, please mention all the steps followed or Quote the Post where you followed it from.

I had to remove Magisk to get these apps working again.
Tried all the mentioned tricks.

Thanks

I run the stable Magisk v.20.4 with the most recent Manager (obviously renamed/hidden) in my Sony Z5 Compact phone, loaded with Lineage OS 17.1. I use the MHPC module in order to pass CTS profile tests. By ticking all the boxes for the Company Portal app (the same for all related work apps) in Magisk hide tab, it works.

 

[c19932]

Magisk hide works perfectly for me as well, no need for any additional modules. I do wish there was a module that could bypass lockscreen requirement by company portal though. A module that disabled company portal's admin privilege could achieve that too.

 

[awdrifter]

I run the stable Magisk v.20.4 with the most recent Manager (obviously renamed/hidden) in my Sony Z5 Compact phone, loaded with Lineage OS 17.1. I use the MHPC module in order to pass CTS profile tests. By ticking all the boxes for the Company Portal app (the same for all related work apps) in Magisk hide tab, it works.

This seems to have done the trick. I ripped the older version of Intune and Teams from my previous phone, updated Magisk to the latest Beta (I was using Canary), then just checked all the toggles as shown on the screenshots. It seems to have worked for me.

 

[hondoslack]

So, very important to install Company Portal and DO NOT OPEN. Clear data/cache, then open Magisk, and after ensuring it is hidden/renamed, find Company Portal in the hidden apps page, and hide all. I made the mistake of trying to find Company Portal in Magisk AFTER opening it. It does some trickery to hide itself from Magisk at that point, then its too late! I'm sure this is mentioned somewhere here in this thread, but doesn't hurt to bring the gotcha's to the front of the line!

 

[chirag.keshri]

Guys i am using a custom rom in my pocof1 and my phone is rooted and decrypted (no encryption). When i setup intune app it setups work profile and it asks me to encrypt the device. I have enable hide magisk for intune app. Please help to fix this issue.

 

[CFKod]

Guys i am using a custom rom in my pocof1 and my phone is rooted and decrypted (no encryption). When i setup intune app it setups work profile and it asks me to encrypt the device. I have enable hide magisk for intune app. Please help to fix this issue.

Don't decrypt your device and you'll be fine. There's no getting around it.

Although my rom shows encrypted but can view it in recovery without decrypting... I installed rom and then wiped data and it loads as encrypted in the os itself

 

[Steve0007]

Eventually got it working. Just ensure you hide Outlook and intune.
Within the hide option related to Intune make SURE you select all the sub-activity within Intune / Company portail.

 

[sa3d1337]

Hello, If someone is able to help me, I have Galaxy S7, running custom rom with Android 10 and Samsung One Ui 2.5. I am trying to enable Microsoft Intune on my phone and I did not root my phone so I can run this app but now it is asking for Knox encryption but I don't have it because Knox tripped cuz of custom rom. Can someone tell me how I can enable encryption so i can access my work mail through intune. Thanks

 

[GoodSoul]

Hey @Dreamer(3MF)

Can you please fix your 1st post? It is very hard to read when everything is crossed out, thanks.