Use Microsoft Intune Company Portal in Rooted Android Device

In this guide, we will show you the steps to use the Microsoft Intune Company Portal app on a rooted Android device. When it comes to managing corporate apps, data, and resources all under one roof, then it’s the offering from the Redmond giant that many organizations are usually inclined towards. Its Company Portal app provides both the students as well as the employees of an organization to access all those resources in a secure and streamlined manner. Since the app mostly deals with confidential data pertaining to a company, it has put in some restrive measures in place.

One among them is the fact that the app will not function on a rooted device. Since the bootloader on those devices is unlocked and users generally opt for a custom ROM which might be less secure than the stock ecosystem, Microsoft takes no chances whatsoever and blocks the functioning of the app on such devices. But if you wish to bypass this restriction, understanding all the risks involved, then this guide shall help you out. In this tutorial, we will show you the steps to use the Microsoft Intune Company Portal app on your rooted Android device. Follow along.

Use Microsoft Intune Company Portal in Rooted Android Device

The below instructions are listed under separate sections for ease of understanding. Make sure to follow the same sequence as mentioned. Droidwin and its members wouldn’t be held responsible in case of a thermonuclear war, your alarm doesn’t wake you up, or if anything happens to your device and data by performing the below steps.

METHOD 1: Using Enforce Deny List

In this method, we will be using the Configure Denylist + Enforce Denylist feature of Magisk to hide the root from the Microsoft Intune Portal. Follow along.

STEP 1: Pass SafetyNet

First and foremost, your device should have passed the SafetyNet Test using the Magisk Hide Props Config module. If that isn’t the case, then do so via the instructions given in this guide- How to Pass SafetyNet on Rooted Android.

STEP 2: Enable Zygisk and Enforce DenyList

1. Launch the Magisk App on your device tap on the Settings icon situated at the top right.
2. After that, scroll to the Magisk section and enable the toggle next to Zygisk and Enforce Deny List.
   
3. Now restart the device for the changes to take place. Also, verify that Zygisk status is YES under Magisk.

STEP 3: Configure DenyList | Hide Root from Microsoft Intune

1. Under the Magisk Settings menu, tap on Configure DenyList.
2. Now, tap on Microsoft Intune Company Portal and checkmark all its associated apps.
   
3. After that, tap on the overflow icon situated at the top right and select Show System App.
4. Now checkmark Google Play Protect Services, Google Play Services, Google Play Store. and Google Service Framework.
   

STEP 4: Hide Magisk App

1. Go to the Magisk settings menu and tap on Hide the Magisk App.
2. Then give it the desired name of your choice and tap OK.
   
3. The hiding process will now begin. Once done, it will ask whether you wish to have the app shortcut on the home screen.
4. For ease of convenience, you may select Yes and then tap on the Add to Home Screen button.
   

STEP 5: Delete Play Service Play Store, and Intune Data

1. Head over to Settings > Apps > See All Apps.
2. Then select Google Play Service and go to its Storage and Cache section.
3. After that, tap on Manage Space > Clear All Data.
   
4. Once that is done, go back and select Google Play Store.
5. Then go to the Storage and Cache section and tap on Clear Storage > OK.
   
6. Finally, delete the data of the Microsoft Intune Portal app as well.
7. Once done, restart your device for the changes to take place.

That’s it. These were the steps to use the Microsoft Intune Company Portal app on a rooted Android device using Enforce Denylist feature of Magisk.

METHOD 2: Via Shamiko and LSPosed [NEW]

In this approach, we will be using the Configure Denylist via Shamiko to hide the root from Intune Portal. However, as opposed to the earlier method, we will not enable Enforce Denylist this time around. So with that in mind, let’s get started.

STEP 1: Enable Zygisk

1. Launch Magisk and tap on the settings icon situated at the top right
2. Then enable the toggle next to Zygisk and restart your device.
3. Now launch Magisk and make sure it says Yes next to Zygisk.

STEP 2: Install LSPosed Zygisk

Next up, install the Zygisk version of Xposed Framework/LSPosed using the instructions given in this guide: How to Install Xposed Framework/LSPosed on Android.

STEP 3: Install Shamiko Module

1. To begin with, download the Shamiko Module from GitHub.
2. Then Magisk, go to its Modules section, and tap on Install from Storage.
3. Now select the Shamiko module and it will be flashed. Once done, hit Reboot.

STEP 4: Configure DenyList | Hide Root from Microsoft Intune

1. Under the Magisk Settings menu, tap on Configure DenyList.
2. Now, tap on Microsoft Intune Company Portal and checkmark all its associated apps.
   
3. After that, tap on the overflow icon situated at the top right and select Show System App.
4. Now checkmark Google Play Protect Services, Google Play Services, Google Play Store. and Google Service Framework.
   

STEP 5: Hide Magisk App

1. Go to the Magisk settings menu and tap on Hide the Magisk App.
2. Then give it the desired name of your choice and tap OK.
   
3. The hiding process will now begin. Once done, it will ask whether you wish to have the app shortcut on the home screen.
4. For ease of convenience, you may select Yes and then tap on the Add to Home Screen button.
   

STEP 6: Delete Play Service, Play Store, and Intune Data

1. Head over to Settings > Apps > See All Apps.
2. Then select Google Play Service and go to its Storage and Cache section.
3. After that, tap on Manage Space > Clear All Data.
   
4. Once that is done, go back and select Google Play Store.
5. Then go to the Storage and Cache section and tap on Clear Storage > OK.
   
6. Finally, delete the data of the Microsoft Intune Portal app as well.
7. Once done, restart your device for the changes to take place.

That’s it. You will now be able to use Microsoft Intune Company Portal on your rooted Android device. If you have any queries concerning the aforementioned steps, do let us know in the comments. We will get back to you with a solution at the earliest.

• Microsoft InTune Missing Certificate on Android 12: How to Fix
• Uninstall Microsoft Intune App on Android via ADB Command
• How to Use Google Pay [GPay] in Rooted Android
• How to Install OTA Updates in Rooted Android Device