How To Install Microsoft Intune

Yous are using an out of appointment browser. It may not brandish this or other websites correctly.
You should upgrade or use an alternative browser.

[Tutorial] [Root] How to configure 'Microsoft Intune' to go far work with 'Magisk'

• Thread starter GoodSoul
• Start date Feb 13, 2022

• #1

This question was asked many times and ofttimes all the answers did not work:
How practice I go Magisk to work with Microsoft Apps like Microsoft Teams, Microsoft Outlook etc (protected by Microsoft Intune)?

With Magisk 24.one it is finally possible to featherbed the protection of Microsoft Intune. Here are the instructions on how to proceed. The solution requires root!
- First of all you demand the latest Magisk version (24.1 or higher).
- After installation select:
- Settings -> Hide the Magisk app : Select a new name of your pick (I utilise 'MM' for 'Magisk Manager')
- After Magisk has been hidden open up 'Settings' and enable 'Zygisk (Beta)'
- Select 'Enfore DenyList'
- Select 'Configure DenyList'
- Use the magnifying glass and search for "Microsoft". You will find "Company Portal" (also known every bit Microsoft Intune). Important: Expand the view by clicking on the entry. You will see something like this:

- Now, with the expaned view, click the entry. It will look like this:

- Repeat these stride (first aggrandize, then clicking the button) on each other Microsoft App - e.1000. Microsoft Teams, Microsoft Outlook, ...
Important : If you practice not expand the view it will not work!

Now, to brand sure that this solution is really working ....
- Install YASNAC - Yet Another SafetyNet Attestation Checker from the Google Play Store.
- Run the SafetyNet Attestation on YASNAC
When it fails is shows something similar this:

- To set up the Basic integrity y'all need to install the latest Universal SafetyNet Fix from Github.
- Download the ZIP and install it equally a module in Magisk (24.1 or higher).
- Reboot again and restart the YASNAC - Yet Some other SafetyNet Attestation Checker. It should now pass (at least) the Basic integration.

Now your Microsoft Apps should piece of work.

If this is non the instance y'all might also need to fix your CTS contour friction match. You tin resolve this past doing the following steps:
- Download and install the latest release of MagiskHide Props Config from Github in Magisk equally a Module.
- Restart your Phone!
- Launch a Terminal of your choice (e.1000. Termux, Android Final Emulator, ...).
- Type 'su' (enter) and concur to the root dialog.
- Now type 'props' (enter) ...
... select '1' for Edit device fingerprints
... select 'f' for Selection a certified fingerprint
... select a vendor of your phone (east.thousand. Xiaomi, Poco, Google, Samsung, Oneplus ...)
... select your phone (if bachelor) or a telephone which is next to your phone with your installed Android version (for example 9,x,11).
- After selecting the fingerprint for your device, and when the plan ends, reboot your device

Afterwards reboot another check of YASNAC - Yet Another SafetyNet Testament Checker should the look like this:

Important:
Once YASNAC shows Pass on Basic integrity and CTS profile match you can use whatsoever Cyberbanking App (e.g. Google Pay, N26, DKB, Sparkasse, Revolut, bunq, <whatever>) past repeating the inital steps for each of these Apps and it should not detect root. Y'all might demand to clear the data before the app stops lament about a rooted device (case Google Pay).

If yous find this tutorial helpful please leave a like for this post - thanks in advance.

BTW: @skuppej did the same steps in another post before my mail with success. Yous can read it here.

Concluding edited: Feb 16, 2022

• #2

More Informations / Background / How does this piece of work:

Magisk: The Age of Zygsik

Magisk Hide Props Config - SafetyNet

• #3

Hi @GoodSoul nice method- same equally my posting from dorsum two+ weeks agone
Cheers for the repost! It'south a proven working method

Zygisk (Alpha channel) + Magisk Hide app stting + DenyList + (MagiskHide Props Config (add fingerprint) + Universal SafetyNet Set)

• #5

Oh, this method is what you should use to hide root from annihilation

tldr:

Zygisk (Alpha aqueduct) + Magisk Hibernate app stting + DenyList + (MagiskHide Props Config (add fingerprint) + Universal SafetyNet Set up)

• #6

Hi,
I've exactly followed the steps mentioned but InTune notwithstanding detects root.
I've InTune v5.0.5421 installed and Magisk v24.i installed.

The only difference from your screenshots is that y'all've evaluation type HARDWARE_BACKED, I've BASIC. The rest is same. My phone is S9 with Stock Android 10 installed.

Do you take whatsoever suggestion to check?

• #7

This did piece of work, but for some reason as soon as I enable Enforce Deny listing, I go extreme lag. Without that option enabled phone woks fine merely intune detects root and blocks. I really wish there was a improve solution, this never was an issue with MagiskHide

• #eight

hmm. Update. For literally no reason with cipher changed information technology but stopped working...No idea why

• #9

has anyone had luck with this lately?
I tried the 5067 version and it worked, but teams and outlook nonetheless stated that the intune is out of appointment, and then still unusable.

Hello,
I've exactly followed the steps mentioned but InTune nevertheless detects root.
I've InTune v5.0.5421 installed and Magisk v24.1 installed.

The but difference from your screenshots is that yous've evaluation type HARDWARE_BACKED, I've Bones. The rest is same. My phone is S9 with Stock Android 10 installed.

Practise you accept any suggestion to bank check?

Make certain yous guys articulate data in your intune/teams apps, first. Also, delete any piece of work accounts that might pre-be, if yous have them.

• #ten

Make sure y'all guys clear information in your intune/teams apps, first. As well, delete any work accounts that might pre-be, if yous have them.

Hi,
Thank you for your reply only InTune doesn't give an fault related to rooting. It says the Os is modified and I recall that is because of organisation condition is "Custom". I'thousand searching for a way to go far "Official" once more without loosing root but couldn't notice anything.

• #11

I am on zygisk denylist + shamiko + ticking all processes in denylist
I accept besides installed universal safetynet only removed information technology every bit it doesnot make a departure and i donot accept an issue to fail safetynet for at present
I am passing intune and Outlook app but
However Onedrive , Part and Teams says i am having policy fault and refuse to log in

I would appreciate whatsoever help as it is crucial for my piece of work environs

• #12

Have people gotten this to piece of work on the latest version of Intune (5.0.5421.0)? Root is even so being detected on my Google Pixel 4a and five. I read in the other thread to use an older version of Intune, but my visitor Intune policy will not allow it (get a Company portal out of appointment message).

• #13

My Intune is updated to five.0.5421.0 and Teams is still working on all my devices (Oneplus 7, Samsung Tablet A6, Samsung Galaxy S8+ - all with LineageOS 18.ane).

For those who accept problems: What does 'adb logcat' says in the moment when you launch teams?

• #xiv

My Intune is updated to v.0.5421.0 and Teams is still working on all my devices (Oneplus 7, Samsung Tablet A6, Samsung Galaxy S8+ - all with LineageOS xviii.ane).

For those who accept issues: What does 'adb logcat' says in the moment when you launch teams?

Hullo,
I don't take that much technical knowledge. Could y'all please guide me how can I record the logs then that I can share it here?
Thank you.

• #15

I don't have that much technical knowledge. Could y'all please guide me how can I record the logs then that I can share it hither?

Try one of these tutorials.

• #16

Hey,

I am still using Magisk 23.0 and recently also my Outlook and Teams started crying about my rooted devices. But I take a strange behavior: If I click away this message two-3 times everything works fine ¯\_(ツ)_/¯.
Anybody else who notices this behavior?

@GoodSoul Is this meant to be work also within the Android Enterprise environs? I mean this thing which is encapsulated from the residue of the organisation like I would create another user.

• #xviii

I used Android Studio to get the logs. Please observe them below. To be honest, I didn't undestand annihilation from them

                                2022-03-fifteen xix:04:twenty.037 6529-6529/? E/[IndicatorGarden]Presenter: onGardenApplyWindowInsets() New DisplayCutout is Goose egg!! 2022-03-15 nineteen:04:twenty.041 6203-7029/? East/WindowManager: win=Window{d677566 u0 com.microsoft.windowsintune.companyportal/com.microsoft.omadm.client.OMADMAwaitActivity} destroySurfaces: appStopped=true win.mWindowRemovalAllowed=simulated win.mRemoveOnExit=fake win.mViewVisibility=eight caller=com.android.server.wm.AppWindowToken.destroySurfaces:1249 com.android.server.wm.AppWindowToken.destroySurfaces:1230 com.android.server.wm.AppWindowToken.notifyAppStopped:1285 com.android.server.wm.ActivityRecord.activityStoppedLocked:2776 com.android.server.wm.ActivityTaskManagerService.activityStopped:2512 android.app.IActivityTaskManager$Stub.onTransact:2280 android.os.Binder.execTransactInternal:1056 2022-03-xv xix:04:20.061 6529-6529/? E/[IndicatorGarden]Presenter: onGardenApplyWindowInsets() New DisplayCutout is NULL!! 2022-03-xv nineteen:04:20.064 6529-6529/? E/SystemUIImageView: set Image Drawable!! 2022-03-15 19:04:20.064 6529-6529/? E/SystemUIImageView: set Groundwork Drawable!! 2022-03-15 nineteen:04:20.070 6529-6529/? E/[IndicatorGarden]Presenter: onGardenApplyWindowInsets() New DisplayCutout is Nada!! 2022-03-15 xix:04:20.495 6814-6814/? E/ApduServiceInfo: Not adding <aid-group> with empty or invalid AIDs 2022-03-15 xix:04:twenty.607 526-1088/? E/BufferQueueProducer: [com.android.systemui.infinity.InfinityWallpaperBlue$_6721#0] disconnect: non connected (req=1) 2022-03-fifteen 19:04:20.609 526-2814/? E/BufferQueueProducer: [com.microsoft.windowsintune.companyportal/com.microsoft.windowsintune.companyportal.views.EnrollmentActivity$_20093#0] disconnect: not continued (req=i) 2022-03-15 nineteen:04:xx.681 32192-32192/? E/Zygote: isWhitelistProcess - Process is Whitelisted 2022-03-15 19:04:20.681 32192-32192/? E/Zygote: accessInfo : 1 2022-03-15 xix:04:xx.683 6203-8084/? E/WindowManager: win=Window{7796f62 u0 com.microsoft.windowsintune.companyportal/com.microsoft.windowsintune.companyportal.views.EnrollmentActivity} destroySurfaces: appStopped=true win.mWindowRemovalAllowed=false win.mRemoveOnExit=fake win.mViewVisibility=viii caller=com.android.server.wm.AppWindowToken.destroySurfaces:1249 com.android.server.wm.AppWindowToken.destroySurfaces:1230 com.android.server.wm.AppWindowToken.notifyAppStopped:1285 com.android.server.wm.ActivityRecord.activityStoppedLocked:2776 com.android.server.wm.ActivityTaskManagerService.activityStopped:2512 android.app.IActivityTaskManager$Stub.onTransact:2280 android.os.Binder.execTransactInternal:1056 2022-03-15 xix:04:20.713 32192-32192/? E/nder:appservic: Not starting debugger since procedure cannot load the jdwp agent. 2022-03-15 nineteen:04:22.298 7354-8693/? Eastward/BtGatt.ContextMap: remove() - removed: vii 2022-03-15 19:04:22.341 7354-7521/? E/BtGatt.GattService: [GSIM LOG]: gsimLogHandler, msg: MESSAGE_SCAN_STOP, appName: android.uid.system, scannerId: seven, reportDelayMillis=0 2022-03-xv 19:04:22.433 7354-7521/? E/BtGatt.GattService: [GSIM LOG]: gsimLogHandler, msg: MESSAGE_SCAN_START, appName: android.uid.organization, scannerId: 7, reportDelayMillis=0 2022-03-15 xix:04:22.582 2892-2913/? E/perfsdkserver: [Interface] BpPerfSDKService::connectionRequest() 2022-03-15 19:04:27.585 2892-2913/? Eastward/perfsdkserver: [Interface] BpPerfSDKService::connectionRequest() 2022-03-fifteen nineteen:04:28.568 6203-6233/? Eastward/Watchdog: [e-mail protected]: 772 heap: 95 / 96 [2022-03-15 nineteen:04:28.567] sdogWay: softdog 2022-03-15 xix:04:32.591 2892-2913/? Due east/perfsdkserver: [Interface] BpPerfSDKService::connectionRequest() 2022-03-xv 19:04:37.597 2892-2913/? E/perfsdkserver: [Interface] BpPerfSDKService::connectionRequest() 2022-03-15 nineteen:04:42.603 2892-2913/? Due east/perfsdkserver: [Interface] BpPerfSDKService::connectionRequest() 2022-03-15 xix:04:47.585 32243-32243/? E/Zygote: isWhitelistProcess - Procedure is Whitelisted 2022-03-15 19:04:47.586 32243-32243/? E/Zygote: accessInfo : i                              

Similar threads

Source: https://forum.xda-developers.com/t/tutorial-root-how-to-configure-microsoft-intune-to-make-it-work-with-magisk.4402273/

Posted by: sheppardonthe1952.blogspot.com

Share this post