LineageOS 14.1 - How to enable Email app for restricted user (for Exchange)? - LineageOS Questions & Answers

Hi,
finally I found LineageOS as a suitable OS for the Moto G4 Plus in a work environment, where employees get an restricted user profile. In my test, everything seems to work fine up to now. But the problem is now that I cannot enable the "Email"App for the restricted profiles to connect to the Exchangeserver 2010.
Since k9-Mail does not work with Exchange, it could not work as a replacement.
I read, the reason is that a google account cannot be used in restricted accounts. That is fine. But I don't want to use a google but an exchange account. Does anyone has an idea how to solve this?

risaer said:
Hi, finally I found LineageOS as a suitable OS for the Moto G4 Plus in a work environment, where employees get an restricted user profile. In my test, everything seems to work fine up to now...
Click to expand...
Click to collapse
I don't have this device but, your best bet is to post this question within the following Official LineageOS thread for your device.
https://forum.xda-developers.com/showthread.php?t=3522101
If all else fails, and you don't receive any responses from the above thread, you can always try to obtain some member guidance within the following Q&A thread that's specific to your device.
https://forum.xda-developers.com/showthread.php?t=3526598
Good Luck!
~~~~~~~~~~~~~~~
I DO NOT provide support via PM unless asked/requested by myself. PLEASE keep it in the threads where everyone can share.

risaer said:
Hi,
finally I found LineageOS as a suitable OS for the Moto G4 Plus in a work environment, where employees get an restricted user profile. In my test, everything seems to work fine up to now. But the problem is now that I cannot enable the "Email"App for the restricted profiles to connect to the Exchangeserver 2010.
Since k9-Mail does not work with Exchange, it could not work as a replacement.
I read, the reason is that a google account cannot be used in restricted accounts. That is fine. But I don't want to use a google but an exchange account. Does anyone has an idea how to solve this?
Click to expand...
Click to collapse
So you have gapps installed. Do you really need it in this setup? Without gapps you get the default aosp mail. No Google account on the phone.

Hmm. I suppose it is not a device specific problem, but a general one.
Maybe even a general Nougat one? <-- UPDATE: Stock seems not to have the selection list **
And no. No GAPPs. It is the modified Version with MicroG. Email app is com.android.email (Version 7.1.2). I will try the unmodified version also.
If I go to the user page where I can allow, which apps can be used, more or less every app is listed but (UKW-Radio, Recorder AND E-Mail).
I also tried to move the Email from /system/app to /data/app which only caused force closes.
Maybe another reason could be that by entering exchange data you will be forced to add it as device administrator so it is not in the list?
Any help is apreciated.

I tested several mail-apps now, but either they do not support the Exchange server or they send a lot of data to other obscure servers so I have not found any alternative. I also installed the "Gmail" app (which is also usable with an exchange account) but this also does not appear in the share list and I absolutely do not understand why.

risaer said:
I tested several mail-apps now, but either they do not support the Exchange server or they send a lot of data to other obscure servers so I have not found any alternative. I also installed the "Gmail" app (which is also usable with an exchange account) but this also does not appear in the share list and I absolutely do not understand why.
Click to expand...
Click to collapse
Looks like you should install something from Microsoft.

kurtn said:
Looks like you should install something from Microsoft.
Click to expand...
Click to collapse
Sorry, if I do not understand if there is a hidden meaning behind this. If this is a serious tip I do not know what app? The android outlook app (which really looks neat) happily transfers AND STORES your account credentials and the content on their servers (see e.g. https://www.pcworld.com/article/288...s-new-outlook-apps-over-privacy-concerns.html , article is from 2015, but I suppose it is still valid. Some time ago I checked it and found out that there is no connection to my but only to some foreign servers). That is not only critical in my sense of privacy but also illegal in the sense of the GPDR. Funny that some people advertise certified Microsoft cloud products for the GPDR.
Nevertheless: Even if I would not use an MS server this would not solve the problem that I cannot select Email or GMail as an allowed app for an restricted user. I also tried the unmodified Lineageos but it has the same issue.
I really do not understand how all the companies work with android phones in working environments. All this fiddeling around just do protect the phones by encrypting the content in case of loss, to give the user restricted access so that they cannot install apps that must not be on the device and to care about privacy. Like on a usual work pc. Do they all use I-Phones?

possible Explaination (?)
(arrg. Always copy your text before you try to send your post) short summary of what I've written:
according to these links my understanding like this:
https://support.google.com/nexus/answer/3175031?hl=en and https://android.stackexchange.com/q...restricted-accounts-on-phone-running-lollipop
"Normal user" and "restricted user" is not equivalent to windows "admin" and "restricted user". "restricted users" are not allowed to use accounts so you need to use "normal user" which has some rights less than the owner. All allowed apps has to be installed again (but are just links, no duplicates).
The store and some other apps can be locked with a pattern.
I will test this. If you have further ideas or a suiable management solution for more than 10 phones to hesitate to write.

Related

WP7 Issues and reporting to MS?

How would anyone tell MS of an issue with WP7?
I found a issue that would stop me from using WP7:
If your Exchange Active Sync User ID contains a space, you cannot type in the space to complete your login info!!!
I cannot use this platform with my own exchange server or my companies Exchange server.
Currently WM 6.5 and older did not stop the use of a space in the User ID.
Do you have a developer device? In that case I'd get in touch with those who sent it to you.
On a side note, are you running your own exchange server? Do you use SSL on it? If so, are you using a self-signed certificate on it? Does it work? WM was very bad at it - it would just throw an error and you'd have to install the certificate manually. WP7 won't allow users to install certs, so unless they corrected this Exchange would be a no-go in these cases.
vangrieg said:
Do you have a developer device? In that case I'd get in touch with those who sent it to you.
Click to expand...
Click to collapse
Even the Emulator has the same problem.
vangrieg said:
On a side note, are you running your own exchange server? Do you use SSL on it? If so, are you using a self-signed certificate on it? Does it work? WM was very bad at it - it would just throw an error and you'd have to install the certificate manually. WP7 won't allow users to install certs, so unless they corrected this Exchange would be a no-go in these cases.
Click to expand...
Click to collapse
Running GoDaddy SSL's on both Exchange servers. I can access Exchange(EAS) when the User ID has no space.
Well, the emulator isn't indicative of the real device behavior, it has tons of bugs and I think it doesn't even have mail - you'll need to unlock it for that. MS certainly won't comment on the problems you got this way.
Re GoDaddy - what about the certificate? Is it from Verisign or is it self-signed? When you go to the web interface, does the browser warn you about certificate problems at first?
vangrieg said:
Well, the emulator isn't indicative of the real device behavior, it has tons of bugs and I think it doesn't even have mail - you'll need to unlock it for that. MS certainly won't comment on the problems you got this way.
Re GoDaddy - what about the certificate? Is it from Verisign or is it self-signed? When you go to the web interface, does the browser warn you about certificate problems at first?
Click to expand...
Click to collapse
The emulator/dev has email with EAS. It does work with a (no-space) user id. From Verisign. Browser does not warn of problem. GoDaddy SSL works for any device with the EAS feature (Palm devices (WebOS or WM 6.1), iPhone, iPad, Andriod, Any other WM 6.5 or lower device)
Can anyone with a developer device confirm the problem as well?
The emulator has no ability to add accounts, not even the unlocked one??? It sounds like you have access to the updated bits that the rest of us don't. Maybe you could share?
But at any rate, you should be reporting/asking these sorts of things on the connect site at http://connect.microsoft.com/windowsphone
You're the first person I've seen post on here that has a device so consider yourself fortunate
RustyGrom said:
The emulator has no ability to add accounts, not even the unlocked one??? It sounds like you have access to the updated bits that the rest of us don't. Maybe you could share?
But at any rate, you should be reporting/asking these sorts of things on the connect site at http://connect.microsoft.com/windowsphone
You're the first person I've seen post on here that has a device so consider yourself fortunate
Click to expand...
Click to collapse
I pulled the unlocked emulator from this site. I think it was sometime in June.
Pdiminico said:
I pulled the unlocked emulator from this site. I think it was sometime in June.
Click to expand...
Click to collapse
That one doesn't support syncing to exchange, or any other accounts, at all... at least not that I'm aware of?
Sorry, you are correct. Just tried the emulator version and it never syncs up. The setup does complete but, never reachs EAS.
EAS - WP7 User Name with Space Issue
This is still an issue with RTM devices. Here is a thread on the MS forum:
http://social.answers.microsoft.com...f96-3037-4f57-ac6a-83bc030aeec6?prof=required
The 7.0.7355.0 build still has the same issue.
vangrieg said:
Do you have a developer device? In that case I'd get in touch with those who sent it to you.
On a side note, are you running your own exchange server? Do you use SSL on it? If so, are you using a self-signed certificate on it? Does it work? WM was very bad at it - it would just throw an error and you'd have to install the certificate manually. WP7 won't allow users to install certs, so unless they corrected this Exchange would be a no-go in these cases.
Click to expand...
Click to collapse
to install self-signed certificates simply email them to yourself and open the attachments on the phone. This is how my school installed self-signed certificates for their mail server so I could get my school emails straight to my phone.

[APP] [REQ] GSpace Mobile

Hi guys,
I just posted this over at Android Dev section of XDA
http://forum.xda-developers.com/showthread.php?p=7988886
I'm quite sure many of you would have used this either on Firefox or Symbian, or something along the line.
This would be a great app to port over to Android to make use of the gmail accounts space for whatever you can think of.
currently to access that on my Android phone i've have to do it the long way via sending email to myself
but on a PC or any other platform with plugins that can directly access the Gspace, i can simply drag and drop files into the Gspace file manager.
I personally not that great at programing, i can script just fine, but programing a full app is a bit beyond me.
So, It'll be great if some Developer have spare time to make this great app, i'll donate / buy it off Android Market if it ever becomes available.
Click to expand...
Click to collapse
please give your feedbaks
Dropbox...?
yes i'm aware there's dropbox, but using one's own gmail account offers way more space than dropbox
personally i feel it's better when everything is integrated into 1 account (reason why i like Android OS/phones)
it'll be even better if it can pickup the account username (email)/password from Android OS system settings > Accounts & Sync

[Q] Interest in a security / privacy focused ROM?

Hello and good day,
I haven't found any approach in this and ask this to everybody here around. Is there any interest in a security / privacy focused ROM that has the following features:
internet traffic through TOR
GPG / PGP KeyChain with Apps that support GPG / PGP
no apps that are calling home in any way
no facebook integration (but still possible to use facebook chat with OTR encryption)
without google play (add on possible) and focused on free software
possibillity to encrypt the whole phone OR specific folders
possibility to encrypt SMS text messages
Skype / WhatsApp / ICQ..... alternatives with encrypted OTR chat possibilities
video calling alternative based on XMPP or SIP (instead of skype and general video calls)
The apps for this are all there as free software. I just would compile everything in one CWM-flashable ROM that's ready to use.
Interest anyone?
In the first thoughts the following software would apply:
Based on stripped down (because ram matters in terms of fc and huge games) CyanogenMod 9
GPG/PGP: https://code.google.com/p/android-privacy-guard/
k9 mail: https://code.google.com/p/k9mail/
TOR (orbot): https://www.torproject.org/docs/android
browser: https://guardianproject.info/apps/orweb/
ad(-track) block: https://code.google.com/p/ad-away/
free software market: http://f-droid.org/
multi messanger: https://guardianproject.info/apps/gibber/
multi messanger: http://www.xabber.com/
multi messanger / video calls: https://jitsi.org/
maps: http://osmand.net/
openvpn service: http://code.google.com/p/ics-openvpn/
encfs / truecrypt: https://code.google.com/p/cryptonite/
lbe privacy guard (per app based solution to restrict permissions): http://forum.xda-developers.com/showthread.php?p=18948472#post18948472
search engine: https://duckduckgo.com/
kernel fxp216
I am interested in this! Even if there isn't much interest and you end up not making the rom, please post the names of the apps that it would contain for those interested
Sent from my R800i
updated 1st post with software suggestions
konstruktor said:
updated 1st post with software suggestions
Click to expand...
Click to collapse
I wish this idea would kick into high gear. After reading "No Place To Hide", I think it's time for a ROM with enough encryption and privacy options to make all of us safe.
JT
jttraverse said:
I wish this idea would kick into high gear. After reading "No Place To Hide", I think it's time for a ROM with enough encryption and privacy options to make all of us safe.
JT
Click to expand...
Click to collapse
the thing is you would be forced to use other services than that you are used to and that are common. you would have to say goodbye facebook, google, instagram and i dont know what most people use nowadays to give away their rights. as you can see in terms of replys - there are nearly none. no one with this device seem to be interested about that issue.
you would need to use services like jabber/xmpp instead of skype for example and tell your friends about the opportunity. it would be in interest for everyone but the effort for most people is too big.
and what you say about a safe phone - it's not even marginal possible. you can just encrypt your data so nobody can listen what you do. as you use a phone you can still be tracked by your phone number, other services you use with your browser, by blind sms messages used by feds...
edit: just check the first post. there are some alternatives. you can modify your phone like delete everything with the name google, facebook ......... in it and services / apps that require authentication and are calling home. there are several apps you can use to delete system applications and services. then install some new apps via f-droid that respect your privacy like some i mentioned in the first post

[Q] Email digital signature and encryption

I have a couple Email Digital Certificates (.p12) that I use to sign and encrypt emails from my desktop. I would like to start using them on my phone, but cannot seem to find any options in the native HTC Email app. I got them installed in the security settings on the phone, but just cannot find an option to use them in my emails. I have also tried using K-9, but cannot find an option within that app either.
So, is there any way to digitally sign and/or encrypt emails within the native email app?
If not, are there any reputable, trustworthy 3rd party apps in the app store that have this capability?
Oh and not sure if it actually matters, but I have the VZW variant One M8....
Thanks in advance,
Kratos
king kratos said:
I have a couple Email Digital Certificates (.p12) that I use to sign and encrypt emails from my desktop. I would like to start using them on my phone, but cannot seem to find any options in the native HTC Email app. I got them installed in the security settings on the phone, but just cannot find an option to use them in my emails. I have also tried using K-9, but cannot find an option within that app either.
So, is there any way to digitally sign and/or encrypt emails within the native email app?
If not, are there any reputable, trustworthy 3rd party apps in the app store that have this capability?
Oh and not sure if it actually matters, but I have the VZW variant One M8....
Thanks in advance,
Kratos
Click to expand...
Click to collapse
I think I finally figured this out. Android (for some very strange reason) doesn't actually support digital signatures or encryption with email natively. Therefore, one MUST use a third party app to process encrypted or digitally signed emails.
I have checked out R2Mail2 as a possible solution and am thus far liking it. There were a couple other options (but only a couple I could find) and they either had very low reviews or were requesting permissions that just didn't make sense. In fact one of them actually tried to explain why they needed permissions to view call logs, but weren't convincing enough for me so I skipped over it.
I also have a Galaxy Tab 2 10.1 and it supposedly supports certificates natively (something Samsung added themselves), but I guess it doesn't support S/MIME with the .p12 extension as it continues to tell me that there are no files found on my device.
If anyone has any other solutions that are better than having to use (and pay for) a 3rd party app, please do tell.
Thanks Kratos
king kratos said:
I think I finally figured this out. Android (for some very strange reason) doesn't actually support digital signatures or encryption with email natively. Therefore, one MUST use a third party app to process encrypted or digitally signed emails.
I have checked out R2Mail2 as a possible solution and am thus far liking it. There were a couple other options (but only a couple I could find) and they either had very low reviews or were requesting permissions that just didn't make sense. In fact one of them actually tried to explain why they needed permissions to view call logs, but weren't convincing enough for me so I skipped over it.
I also have a Galaxy Tab 2 10.1 and it supposedly supports certificates natively (something Samsung added themselves), but I guess it doesn't support S/MIME with the .p12 extension as it continues to tell me that there are no files found on my device.
If anyone has any other solutions that are better than having to use (and pay for) a 3rd party app, please do tell.
Thanks Kratos
Click to expand...
Click to collapse
No one has any ideas about native S/MIME support?
Kratos
I've been looking into this for a while... and I think you already found the best solution. R2Mail2 handles both S/MIME and PGP. I haven't seen any other good options for S/MIME. K9 + APG can give you PGP. There used to be a simple native mail app that would do PGP, but it looks like thats been pulled by Google.

[Q] New Rom / missing features of basic apps

Hi!
I just installed the KITKANG rom (cf. http://forum.xda-developers.com/showthread.php?t=2549776) and a the first glance, it is pretty nice. But then I noticed a few things I really dislike such as
- The Web Browser does not reformat text (to make it fitting on the screen) if you zoom in manually by gesture. The browser I had on my previous image (caynogenmod 7) did this. And I don't want to miss that feature anymore.
- The contacts application seems to work by syncing contacts tothe Google cloud, only. My old contacts app had the choice to store contacts locally on the phone without Google sync.
I have no idea how to get this missing features back, again. Any comments / pointers?
I.
- Install another browser that has this feature
- The newer 'people' app may not have the option to store locally, but why do you want this? The whole point of an Android phone is to sync with your Google account.
It is dangerous to only store your contacts on the phone, because if you ever lose the phone, you lose all your contacts.
If you sync your contacts to your Google account and you lose your phone, your contacts are still safe :good:
eddiehk6 said:
- Install another browser that has this feature
- The newer 'people' app may not have the option to store locally, but why do you want this? The whole point of an Android phone is to sync with your Google account.
It is dangerous to only store your contacts on the phone, because if you ever lose the phone, you lose all your contacts.
If you sync your contacts to your Google account and you lose your phone, your contacts are still safe :good:
Click to expand...
Click to collapse
@ browser issue: I meanwhile learned that the issue cause by a change of the the rendering engine in Android to WebView. So, almost all browsers are affected by this. (For details, google "Text Reflow Removed From WebViews In KitKat, Probably Not Coming Back"). Opera is an exception, because it comes alone with its own machinery. However, I tried Opera and is is slow on my HTC Desire. As many, many other people complaining, I cannot understand why the Android development folks dropped such a fundamental feature. The Android Browser of Kitkat tends to be unusable now! And I consider a smartphone without a proper browser as unusable as well. Which at the end might prevent me from buying another Android smartphone...
@ contacts: I totally disagree. Well, yes, from Googles perspective, your statement might be true. But for the user, Android is at first just an operating system to run your smartphone. Think about why Google wants your data...! - I want to *own* my data, so I don't want to use cloud services. Strange that you think syncing of data is equivalent to syncing to Google! Of course I sync all my data. To my own PC. If I'd loose my phone, I won't loose my data, just re-install it to my new phone from my PC.
It is nice that Google offers syncing. But enforcing to sync *is* evil...
inmado said:
@ browser issue: I meanwhile learned that the issue cause by a change of the the rendering engine in Android to WebView. So, almost all browsers are affected by this. (For details, google "Text Reflow Removed From WebViews In KitKat, Probably Not Coming Back"). Opera is an exception, because it comes alone with its own machinery. However, I tried Opera and is is slow on my HTC Desire. As many, many other people complaining, I cannot understand why the Android development folks dropped such a fundamental feature. The Android Browser of Kitkat tends to be unusable now! And I consider a smartphone without a proper browser as unusable as well. Which at the end might prevent me from buying another Android smartphone...
@ contacts: I totally disagree. Well, yes, from Googles perspective, your statement might be true. But for the user, Android is at first just an operating system to run your smartphone. Think about why Google wants your data...! - I want to *own* my data, so I don't want to use cloud services. Strange that you think syncing of data is equivalent to syncing to Google! Of course I sync all my data. To my own PC. If I'd loose my phone, I won't loose my data, just re-install it to my new phone from my PC.
It is nice that Google offers syncing. But enforcing to sync *is* evil...
Click to expand...
Click to collapse
I can see this descending quickly into a rather philosophical debate, but on the basis of your reasoning I wonder whether an Android smartphone is suitable for your needs in the first place. I didn't know your stance on personal data from your first post.
I agree with the text reflow browser, a really useful feature. Opera has it like you found out, though the Desire is just an old phone now which struggles to run it. Plenty of newer Android devices will run it just fine. The depth of the Play Store is such that you'll almost certainly find an alternative suitable for your requirements, so perhaps test and consider that for future smartphone purchases.
As for syncing with cloud services, it comes down to user trust and needs I guess. You're right you don't have to use Google, but an Android smartphone really does work best if you use their services.
No, I don't think that syncing of all my data is equivalent to syncing to Google, I use other other accounts too and don't sync everything. In my opinion I think it's possible to find a reasonable middle ground between paranoid tin hat and being ignorant about all personal data. For me, I disable all location tracking stuff and usage stats for any apps (not just Google ones), as I don't need them and feel uncomfortable sending this data. But I do sync other google services like Gmail / contacts because I find they work and are convenient for me. You believe it's evil, I believe it's useful and convenient, just a difference of opinion.
For your workaround, if you don't want to sync contacts, you could disable contact sync within the settings. Would be equivalent to local storage. Or install a different contacts app to manage and store contacts locally.
To avoid this philosophical debate, I'll try give a short answer.
I am using Android for about 5 years now. Without using Google cloud services. And have been a happy Android user. Sounds quite funny to me if someone wonders if Android would be the right thing for me.
Using cloud services is not really a matter of trust. I.e. I am not afraid that Google looks into single items and makes use out of it. But if you have heard about "big data", you can imagine what the result can be when all the data of some many people gets available for ... things you cannot even imagine..
I tried to add a contact with Google sync switched off. It just don't work. The app hangs...
inmado said:
To avoid this philosophical debate, I'll try give a short answer.
I am using Android for about 5 years now. Without using Google cloud services. And have been a happy Android user. Sounds quite funny to me if someone wonders if Android would be the right thing for me.
Using cloud services is not really a matter of trust. I.e. I am not afraid that Google looks into single items and makes use out of it. But if you have heard about "big data", you can imagine what the result can be when all the data of some many people gets available for ... things you cannot even imagine..
I tried to add a contact with Google sync switched off. It just don't work. The app hangs...
Click to expand...
Click to collapse
You're revealing more about your preferences and Android experience to date with each post...it's not just me wondering whether Android is right for you, in your second post you said so yourself
Anyway each to their own.
Have you tried installing a completely separate contacts/dialer application? You could sideload or use a different app store to find one. A few I know of:
- Contacts+
- Ex dialer
- RocketDial
- Go contacts ex
I'm certain at least one of them will be able to create phone contacts only.

Categories

Resources