Stuck with a enterprise managed Chromebook bought second hand and unable to remove it? Here is how to 'Remove Enterprise Enrollment' from Acer C720 Chromebook (and will work for others also)
The procedure is as follows (for a Acer C 720 Chromebook) however it is the exact same for most other models the only differing part is location of the read/write screw.
Step 1: Turn off Chromebook, unplug and remove all the screws from the base.
Step 2: Remove the base off and locate the read/write protection screw
Here it is on the C720 at location 7:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Step 3: Screw the base on with one screw (because there is a pressure switch that won't let you start it up without having the base on)
Step 4: Plug in and go into Recovery mode (Hold Esc + Reload and press the power key). Release keys when you see the screen light up.
You'll see "Chrome OS is missing or damaged" screen
Step 5: Press Ctrl + D then enter
You'll see "Chrome OS verification is turned off"
Step 6: Press Ctrl + D and the CB will restart into developer mode.
Note: If it tells you administrator has disabled developer mode perform a hard reset by unplugging the battery internally in the device, disconnecting the power and holding down the power button for 60 seconds.
Step 7: Once in developer mode (it'll give you a warning screen then continue to boot up as usual after a few beeps) Press the keys Ctrl+Alt+-> (F2) to launch terminal
Step 8: Enter the following commands:
chronos
sudo su
vpd -l (display serial number and device info)
vpd -s “serial_number”=”0000000000X” (write serial #, can replace 0000000000X with anything you like) must be all CAPS and numbers.
(takes about 15 seconds)
vpd -l (to check change is successful as it doesn't give you any confirmation)
Step 9: Reassemble with all screws incl read/write. Reboot and turn OS verification back on.
Step 10: Enjoy your non enterprise enrolled C720 (or other) chromebook.
Step ?: (optional if you are getting error flashromPartialWrite() clean the contacts that were under the screw with isopropyl alcohol or meths to make sure there is no continuity between the points from wear.
** Note: I am not responsible for you damaging your device in any way **
If i've helped you in any way feel free to donate via the following button. Cheers
i need a little help i have the Samsung Google Chromebook XE303 XE303C12-A01U after trying to change the serial number when i go to check it with vpd -l it gives me the flashrompartialwrite() error. i checked and cleaned where the screw goes but i still get the error. is the screw supposed to be back in at this part of it? please help thank you
I get a login and password need help noob please
Smoker90 said:
i need a little help i have the Samsung Google Chromebook XE303 XE303C12-A01U after trying to change the serial number when i go to check it with vpd -l it gives me the flashrompartialwrite() error. i checked and cleaned where the screw goes but i still get the error. is the screw supposed to be back in at this part of it? please help thank you
Click to expand...
Click to collapse
I'm going to answer this a bit late in case anyone else has this question...
The R/W screw needs to be off until you are ready to put your laptop back together. (after all, you want to be able to write to bios and the screw in place will prevent this)
Doesn't work
hOW CAN YOU REMOVE THE ENTERPRISE ENROLLMENT FROM AN ACER C910
How do you do that on a c730
Version 5.4
Here I am in 2017 will be trying this on a c740 in the near future. Thank you for the guide
is this possible on a hp chromebook 11 g4, if so wher eis the read/write screw located?
I cant't get the administrator has disabled developer mode page. I have tried removing the battery as suggested and had no success.
Same!! Trying soo hard to find a solution
So, I have a Toshiba Chromebook 2. I found it has 2 screws for write protection. Removed them both, no change, I still get the developer mode disabled by the administrator message. Can`t do anything on it. Is there a custom OS I can install over the existing one so I can at least get developer mode enabled?
I have an Acer C731. I opened it up and tried to do a hard reset by unplugging the battery, with no luck. As soon as the Chromebook was connected to Wi-Fi it enrolled under administration. I also was not able to locate the R/W screw in this particular model. Help please?
jbywater said:
I have an Acer C731. I opened it up and tried to do a hard reset by unplugging the battery, with no luck. As soon as the Chromebook was connected to Wi-Fi it enrolled under administration. I also was not able to locate the R/W screw in this particular model. Help please?
Click to expand...
Click to collapse
The screw is located near the wifi card with a white arrow.
josuecas said:
The screw is located near the wifi card with a white arrow.
Click to expand...
Click to collapse
Yes on my Asus CN60 chromebox, the r/w screw is screwed onto the motherboard, onto a solder pad that is a semi-circle split into two quadrants. The presence of the screw joins the two quadrants to emulate a PC jumper in the closed position.
To open this jumper, simply undo the screw all the way out and keep it safe outside of the box. Once this is done, the boot SSD is r/w, which then allows the developer mode process be able to commit its changes to the boot device.
On my Asus CN60, I think I have cleared the Enterprise enrolement by having the two items present whilst doing the power on with Recovery Button pressed.
- R/W screw removed.
- CMOS battery CR-2025 unplugged.
I am going to keep trialing. If the above has not worked, I am going to try the OP's vpd -s “serial_number”=”0000000000X” method.
ASIDE: I am going to keep a note of the serial number I am overwriting in case this is of any future use.
The reason why I say I think I have removed the enterprise enrolement, is before, I could not login at all. Now, whilst in the developer mode, I can now login using my normal non enterprise login.
I have yet to boot into a normal non developer mode if possible, and see if I can login there.
I've bypassed enterprise enrollment so I can login and use the chromebook normally, but I wasn't able to locate the r/w screw so I can move forward with installing Linux.
RyanPieper said:
I've bypassed enterprise enrollment so I can login and use the chromebook normally, but I wasn't able to locate the r/w screw so I can move forward with installing Linux.
Click to expand...
Click to collapse
how did you go about getting past the "administrator has disabled developer mode" part, or did you have to? i am stuck on that part.
I have an HP Chromebook 14 G4 and followed the tutorial perfectly. I still can't get past the "The administrator has disabled developer mode" bs. Any help?
Request
Can you please make a guide on how to do this with an acer c740 with specifucs on how to do so if the administrator has disabled dev mode?
C732
How do I unenroll an acer C732 with dev mode blocked?
does this still work?
Related
Hi everyone
My phone screen is completely smashed but it appears that the phone can still turn on. I've connected it to the laptop and it seems to connect (installing driver, etc) but it doesnt come up on windows explorer. Presumably because the phone is encrypt + PIN locked. I tried tapping randomly on the phone screen but my guess is that it is not registering but even if it is it would be impossible to get the right decryption code in.
1. Is there a way to display the screen output either on TV / Monitor / Computer ?
2. Even better can I get the display replicated on the laptop with a USB connection and navigate through that
I suspect the answer to all of this is no and I just have accept the photos are gone. Any ideas are welcome.
Thanks for reading
yeancheant said:
Hi everyone
My phone screen is completely smashed but it appears that the phone can still turn on. I've connected it to the laptop and it seems to connect (installing driver, etc) but it doesnt come up on windows explorer. Presumably because the phone is encrypt + PIN locked. I tried tapping randomly on the phone screen but my guess is that it is not registering but even if it is it would be impossible to get the right decryption code in.
1. Is there a way to display the screen output either on TV / Monitor / Computer ?
2. Even better can I get the display replicated on the laptop with a USB connection and navigate through that
I suspect the answer to all of this is no and I just have accept the photos are gone. Any ideas are welcome.
Thanks for reading
Click to expand...
Click to collapse
Mini hdmi. If your screen is unresponsive though there isn't much point.
Sent from Jelly Fuelled SGS2
Screen is smashed pretty bad though - don't think it is going to work. Will the mini hdmi work without the phone turn on pass the decryption password stage. Thanks for your help
yeancheant said:
Screen is smashed pretty bad though - don't think it is going to work. Will the mini hdmi work without the phone turn on pass the decryption password stage. Thanks for your help
Click to expand...
Click to collapse
Really unsure. I use cm10 so tv out is unsupported but the mini hdmi cables can be picked up on ebay pretty cheap.
Sent from Jelly Fuelled SGS2
theres not much you can do if you got a pin or screen security.did you enable usb debugging?
Do full wipe try to look into pictures of recovery.
Send form Galaxy S2. Using XDA Premium
If you had USB debugging enabled, then you can easily use ADB to copy out your files
Paulius7 : what do you mean by full wipe - I can't see anything on the screen at the moment
Jokesy: The phone is probably stuck at the password to decrypt in which case I suspect adb wouldn't work. I haven't used that before but might give it a go
Thanks for all the suggestions
yeancheant said:
Paulius7 : what do you mean by full wipe - I can't see anything on the screen at the moment
Jokesy: The phone is probably stuck at the password to decrypt in which case I suspect adb wouldn't work. I haven't used that before but might give it a go
Thanks for all the suggestions
Click to expand...
Click to collapse
Did you have USB debugging enabled?
We can still access adb via CWM recovery
I said. You can look into pictures if you can reach CWM(recovery mode)
Full wipe-Is Clean everything but not pictures
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Paulius7 : The screen is smashed - so I can't really get into CWM - unless I do it blindly and then guess the number of clicks to eventually do full wipe. But I don't understand how full wipe can help "Do full wipe try to look into pictures of recovery. "
Jokesy: I installed resurrection remix - don't know if USB debug is enabled by default. Either way I'm going to download the android sdk and give it ago and see .
yeancheant said:
Paulius7 : The screen is smashed - so I can't really get into CWM - unless I do it blindly and then guess the number of clicks to eventually do full wipe. But I don't understand how full wipe can help "Do full wipe try to look into pictures of recovery. "
Jokesy: I installed resurrection remix - don't know if USB debug is enabled by default. Either way I'm going to download the android sdk and give it ago and see .
Click to expand...
Click to collapse
ICS or Jelly bean?
also its ICS
Somehow my previous entry didn't stick.
So .. the good news is usb debug is on. Downloaded android sdk and java. I'm new at this and this is what happened
adb devices - found the phone
adb shell - got in with root
ls /sdcard/ - empty! presumably due to the encryption or PIN
tried it on the new replacement S3
ls /sdcard/ - all the files came out
any ideas ? I appreciate your help Jokesy and we have seen progress although I accept that the chance of reaching our end point still remains low
yeancheant said:
Somehow my previous entry didn't stick.
So .. the good news is usb debug is on. Downloaded android sdk and java. I'm new at this and this is what happened
adb devices - found the phone
adb shell - got in with root
ls /sdcard/ - empty! presumably due to the encryption or PIN
tried it on the new replacement S3
ls /sdcard/ - all the files came out
any ideas ? I appreciate your help Jokesy and we have seen progress although I accept that the chance of reaching our end point still remains low
Click to expand...
Click to collapse
no that's because /sdcard is not mounted.
follow this tutorial
Boot to recovery, then follow these steps:
1. Connect your device to your pc
2. Open command prompt from Adb folder. (hold shift key, then right click on a blank space, select open command window here)
3. #check if your device is connected via adb by typing in the command window:
adb devices
4. adb shell
5. mount sdcard
6. ## check the directories of the sdcard just to be sure by typing:
ls /sdcard
7. exit
8. adb pull /sdcard \mysdcard
wait for the process to finish
Check you C: drive for a folder named "mysdcard". all the files and folders in your internal storage will be there.
If you face any errors, let me know
Good luck
doesn't seem to work
tried mount sdcard and mount /sdcard and mount /sdcard/
it says mount:can't read 'etc/fstab': No such file or directory
yeancheant said:
doesn't seem to work
tried mount sdcard and mount /sdcard and mount /sdcard/
it says mount:can't read 'etc/fstab': No such file or directory
Click to expand...
Click to collapse
what kernel were you running before your screen broke?
default resurrection remix during the installation - i think its siyah
yeancheant said:
default resurrection remix during the installation - i think its siyah
Click to expand...
Click to collapse
were you using adb from recovery?
probably not earlier. i've tried again - blindly getting into recovery - and i think i did as windows then say installing adb driver - but now when you do "ls" there is no sdcard. tried mount sdcard and the same error message
A couple days back I bricked my G3 so I tried many things but nothing seemed to work, then I found R-T-B’s guide, and it worked, it can unbrick any G3 Vs985.
I highly suggest you to read the complete guide before proceeding and you must ignore the instructions.txt file included in the Unbrick Kit folder.
I am just writing this, the tools are from @R-T-B
Say thanks to that guy and if you like please donate.
Disclaimer: I’m not responsible for anything, use it on your responsibility
What is Hard Brick?
When your has no power, no sign of life, no indication whether plugged or not, sometimes vibrates when plugged in usually stays at black screen aka dead, LED changes color.
To Put Your Phone in Qualcomm USB mode:
If connected to PC Device Manager recognizes as LGE Android Mobile Usb which isn’t a good sign means you going to have to Short Pin via test point.
Open your phone and take out the battery. Remove the top half of the phone housing. You do not need to remove the bottom half by the usb. Also you don't need to remove the screw next to the camera. If you do remember that it is a different size so keep it separate.
2. You will see a big metal shield. You need to remove it. It is pretty easy just pry it off and it pops back into place when you are done.
3. Next you need to short the pins as shown in the following picture with a small thin, stiff metal wire. While continuing to short the pins plug in your usb cable. You should hear windows detect the phone almost instantly. Keep shorting the pins for the count to 5 and then you can release the wire. See image below, ignore the ethernet connector.
Shorting means just attaching those two points with a small thin, stiff metal wire for 5secs or so.
4. Now open device manager in windows and it should show your phone under com ports as Qualcomm 9008 (COM #). If it doesn't try the process over again. When it does work remember this number. It is going to be used later.
5. When your phone has detected as Qualcomm usb then release the shorting points.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Now you’re ready for resurrection of your beloved LG G3
Pre-requisites:
All you need is in this Unbrick Kit, it’s a pretty big file, download, be patient.
Download it here:
md5:
c2a9cff174ed0d4a1c218023087d10cc
Qualcomm QDLoader_HS-USB_Driver 32 and 64bit
LG_Verizon_Drivers
LGUnitedMobileDriver
Note: Only install 32bit or 64bit drivers of Qualcomm, don’t install both
Procedure:
Make sure your phone is in Qualcomm 9008 mode note the com port # in Device Manager
If you are on a 64 bit system you will need to disable driver signing. Here is how:
Step 1. Open the Windows command prompt as “Run as Administrator”.
Step 2. Run
Code:
bcdedit -set loadoptions DISABLE_INTEGRITY_CHECKS
Step 3. To finalize the process run
Code:
bcdedit -set TESTSIGNING ON
Or you can simply disable driver signing by pressing F8 before Windows logo appear when it’s booting.
Step 4. Reboot and you’re done.
Connect your phone w/o battery and run BoardDiag from folder “v2.99” inc. in Unbrick kit
And be sure the AP check and EMMC are checked, select AP chipset as B2 (MSM8974AC), check Qualcomm’s port # from Device Manager and put it in BoardDiag’s ComPort box, see image below:
Now click start and wait for test to complete, if that does not work, try unchecking the EMMC test. If that still does not work, use the BoardDiag in v3.99c folder and also try it without EMMC test.
If it throws an error about not being in dload mode you need to restart the shorting process. Hold the short for a bit longer this time.
Now check RESTORE BOOT IMG and choose “aboot” from drop down menu and again click start
Do the same for following partitions FOLLOW THE ORDER!!
BackupGPT
boot
dbi
laf
PrimaryGPT
recovery
rpm
tz
Now flash “sbl1”. Always flash “sbl1” at the end to prevent super brick.
Phone should now get disconnected.
Remember your phone is connected w/o battery till this point.
Now disconnect from PC and put in the battery
Hold Volume Up button and connect to PC while holding Volume Up button, Congrats you’re in download mode. Now use LG Flash Tool 2014 included in Unbrick Kit.
Run it As Administrator, see image below.
You’ll see this window after clicking CSE Flash, hit enter.
Now it will Stop Responding at 99 percent, happened to me, so I assume it’s just a bug in the program. Don’t worry it’s still going to install the software in your LG G3
Do not remove usb/unplug phone till your phone restarts.
NOTES: If you get an error about a dll missing you need to download and install the following: Download
Now your running 47A Android MM
Hope that this helps, also if you find any problems or need help please post so I can update this post.
Feel free to comment and help me to improve this guide.
The guide is attached as 7z for convenience ...
Thanks..
I seem to have bricked my wife's vs985 trying to flash jasmine ROM. Can get it to qualcomm mode but it keeps failing the eemc test at sbl1. I'll run through the guide a few more times tomorrow but its really being a pain. First the WiFi disappeared and it started acting crazy. Could be its time to go even with the new battery I purchased.
Update:
I managed to flash every file that was mention with the exception of System and User Data. Tried to power on and nothing.
I did that for some odd reason jumping the pins isn't necessary and the device populates automatically when connected to USB. I tried running KDZ but nothing. I can try and run the TOT but, I'm a bit skeptical. As of this moment I have successfully erased the eMMC but when testing it always finds some reason to fail the test.
I'm able to write with APC and Restore Boot IMG selected and as of this moment managed to get the system image re-flashed. I'm in the process of loading the User data which is about 11Gb so it'll take awhile. I still have sbl1 at the end to flash. I will note that when I did jump the pin to ground it would always fail sbl1 or load a partition.txt doesn't exist error. I extracted the TOT as directed but it just kept throwing the same error.
I did also notice when the battery is in and the usb connected it is not recognized by my PC.
very good tutorial
"partition.txt doesn't exist"
Is nowhere to be found. What can I do?
Thanks Almighty God and you alich3451, so much for this guide. My VS985 was bricks. No download, no recovery mode, black screen and the led blinks red and blue continuously when plunged. I toiled for for many researches and guides but all never worked, except this one.
Yes, I really followed the steps critically got the phone back from dead to life.
Through my experience i want to recommend the battery in before the flashing of the TOT file begins . Secondly, do not check the devices manager for the port number but ratter check and watch closely the right conner of the taskbar for the pop up messages with the port number written at the end of the message during the installing of your driver by your windows 7 PC when you plug in the phone with the battery inside. That is the port number you have to take note and use it in Com Port area of BoardDiag v2.99a during the flash of the TOT partitions.
With this added to the main guide above you should get everything working normal.
Thanks alich3451 !!
Do I need to short the pins & stuff if I get into Download Mode already? My Phone is getting shown as LGE AndroidNet USB Serial Port (COM4) is that alright?
Need help please!!!
while i managed to reach up flash tool step where it stack so i had to start all over again but this time i cant even pass the first step.
I successfully sort the pins every time and after i do a successful test with BoardDiag (without emmc) and i get pass message after a few seconds its disconnects and i cant move to the rest steps.
what iam doing wrong ?
Lg Mobile Flash tool
Hello,
after I hit start on the flash tool, it opens up another lg tool that tries to download stuff from the internet. Then my stuff fails
I have G3 D858HK, when i use my current .tot file. It won't boot into download mode. When i use your model file, it successfully boot :3
Is my file corrupt?
[Q] Anyone delt with Samsung 5 Series Chromebook Model xe500c21? Need to Reset / Format somehow.
Chromebook is from 2011-2012. I aquired 15 of these units from an auction. All ex units from a local school. I was told all were removed from the Admin System. Yet when I log in i get the login screen with the icon and password box. So its obvious user accounts are still on there and i need to reset the chromebooks somehow. I went to add user i believe it was on the bottom bar and it took me to a google login screen (similar to FRP) asking for username @"school".k12."state".us and password. At the top it says "Enterprise Enrollment Managed by "school".k12."state".us". I have not been able to make it back to the original screen. I tried flipping the dip switch on the side to enable developer mode and it says it was disabled my Admin. Most likely so the kids wouldn't hack it. There is no options for me except a water down Accessibility Menu, Sound, Wifi and Shut Down.
I have tried esc + refresh key on the original login screen and also shift + ctrl + alt + r? i think it was. Neither worked. I have also read that there is a read/write screw that needs to be removed. I am still researching but have yet to find the best working method to bypass and reset these.
I plan on putting Android on a few if possible. On the others I plan on putting Chrome OS back on and Windows 10 on (slimmed down version since SSD on these are only 16GB).
I would appreciate any help anyone can provide.
Thanks,
phonecapone
[Pictures]
Here are some pictures.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Doesn't look like there is a read/write screw on this model. As well I have not successfully been able to enter developer mode. Model seems to be watered down. I had an RMA with Samsung but since 12 out of the 17 have no warranty anymore they want to charge for fixing them. I did hear from a moderator on samsung.com that there is supposedly a specific Chrome OS version that will work on this. Awaiting an answer back.
I have tried everything known to man and nothing works. My last and what should have been my first options are to contact Googles Support dept through samsung and also the school systems IT Dept to get the MAC and domain removed. Deprovisioned basically.
if you've still got these chromebooks around you might want to give this a try. i just got my xe500c21 a few days ago with an enterprise account lock. After long night of tedious trial and error i am officially logged into the developer console with root permissions. Keep in mind that i haven't *entirely* bypassed the enterprise lock, but now that i have root access it will be trivial... lmk if you need details....
the http://mychromehome.blogspot.com/2014/07/download-chromebook-recovery-image.html
this site has a ton of chromebook images you can download directly from google servers. if you check the file names for our device, you'll notice the 4 variables are: 3g, wifi, US, and non-US.
download whichever firmware *does not* match your current configuration, unzip it, and flash it to a usb using win32 Disk Imager.
https://ayera.dl.sourceforge.net/project/win32diskimager/Archive/win32diskimager-1.0.0-install.exe
make sure youve unzipped the .bin file and click the dropdown box to change "img files" to all. select your .bin file and click write. once its done toggle the dev mode switch to on and then reboot to recovery insert the usb. after it finishes you'll notice a new splash screen, then it'll boot up.
at this point if you get online and try to continue you'll still see the enterprise lock, but fear not. toggle the dev mode switch back to off and the reboot. it'll do the wipe and restart, then from the main screen flip the switch one last time to on, then reboot. now youll see an unfamiliar dialog warning you about the dangers of dev mode. proceed and wait for the chromebook to reboot. it took mine about 6 minutes so be patient.
once it reboots you can enter the terminal by pressing ctr + alt + --> (3rd key from left on top row)
login with username chronos
sudo -i
enjoy
microbot118 said:
if you've still got these chromebooks around you might want to give this a try. i just got my xe500c21 a few days ago with an enterprise account lock. After long night of tedious trial and error i am officially logged into the developer console with root permissions. Keep in mind that i haven't *entirely* bypassed the enterprise lock, but now that i have root access it will be trivial... lmk if you need details....
the http://mychromehome.blogspot.com/2014/07/download-chromebook-recovery-image.html
this site has a ton of chromebook images you can download directly from google servers. if you check the file names for our device, you'll notice the 4 variables are: 3g, wifi, US, and non-US.
download whichever firmware *does not* match your current configuration, unzip it, and flash it to a usb using win32 Disk Imager.
https://ayera.dl.sourceforge.net/project/win32diskimager/Archive/win32diskimager-1.0.0-install.exe
make sure youve unzipped the .bin file and click the dropdown box to change "img files" to all. select your .bin file and click write. once its done toggle the dev mode switch to on and then reboot to recovery insert the usb. after it finishes you'll notice a new splash screen, then it'll boot up.
at this point if you get online and try to continue you'll still see the enterprise lock, but fear not. toggle the dev mode switch back to off and the reboot. it'll do the wipe and restart, then from the main screen flip the switch one last time to on, then reboot. now youll see an unfamiliar dialog warning you about the dangers of dev mode. proceed and wait for the chromebook to reboot. it took mine about 6 minutes so be patient.
once it reboots you can enter the terminal by pressing ctr + alt + --> (3rd key from left on top row)
login with username chronos
sudo -i
enjoy
Click to expand...
Click to collapse
Thanks a ton for that information. It has gave me some ideas and i'm sure will help others in a similar situation. Unfortunately I sold all ~20 something of mine and only have 3-4 parts machines left. All need screens and or are still locked. I managed to get all mine unlocked by calling the school district and having their IT guy deprovision all of mine but a couple.
The only chromebook I have left now is a 13 series? i think it is. Its put away else id take a look at it right now. It supposedly has no issues with dev mode which is why i kept it so i can learn everything about chromebooks then sell it off as im not the biggest fan of them personally. Have too many toys too. ha
Thanks for the advice, ill pass it along to a buddy who is doing some dev on chromebooks right now.
Hey All
Its been a while since I got to play with anything these days but I recently found one of these POS 10in touchscreen units in the dumpster and it fires up into a menu running android. So I was hoping I could reflash this and use it like a tablet given it's also got a small thermal printer in it, so maybe try and save it from e-waste
I searched online for more details and came across this HERE which is identical to what I have so hoping I can root it and flash it with a clean android?
I would love to repurposed this to use as a touch screen tablet or similar, since it's got a GSM module and can take an SDCard too as I opened it up and took some pictures and I managed to get it in a recovery mode as well - from the PIX its using a rockchip RK3368
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
I am not sure if the mini usb port is a OTG port to try and use ADB but I have not been able to do much with it and hoping someone can guide me through to possibly a reflash or ways to unlook root and add in another bootloader/rom
I've downloaded the files from citaq website but so far not been successful to do much with it, has anyone played with these and turned them into something more practical for the home?
Here's hoping for some tips - Apology if this is in the wrong section, move as needed :good:
Cheers
Kosti
@Kostiz
Device actually is running Android 5.1.1. It seems it has only 1GB RAM what is far too little to run a full fledged Android.
As long as you don't replace device's Stock Recovery by TWRP or similar recoveries, after a successful rooting don't install Magisk and/or Xposed Framework, you're on the safe side to play with, IMHO.
As 1st step check whether device is accessable by means of both ADB and Fastboot.
jwoegerbauer said:
@Kostiz
Device actually is running Android 5.1.1. It seems it has only 1GB RAM what is far too little to run a full fledged Android.
As long as you don't replace device's Stock Recovery by TWRP or similar recoveries, after a successful rooting don't install Magisk and/or Xposed Framework, you're on the safe side to play with, IMHO.
As 1st step check whether device is accessable by means of both ADB and Fastboot.
Click to expand...
Click to collapse
Hey, Thanks for chiming in!
So in order to get ADB and or Fastboot its suggested to enable USB debugging in the device system settings, but I am not sure on how to do this, would it be safe to assume this is already USB debug is already enabled?
Could I back up the original stock recovery
I'm a little green on the whole process hence looking thought I'd ask here, I don't think I even have an OTG cable handy
I will see if I can load ADB on a windows box and try and talk to this unit
Cheers
Kosti
@Kostiz
An OTG-cable isn't needed, because the recovery menu
doesn't give you the opportunity to load something from an USB-device
OK, some success!
I went back and connected a mini USB straight to the PC and ADB driver installed detected the android device.
Ran ADB in windows powershell
So whats the best method to backup the entire ROM, and recovery files in the event I stuff this up?
Do I use just ADB for this or someother tools?
I did try one tool here from the vendors website but stuck as not sure what the Chinese characters mean..
Is the fact that this is only 1G i couldn't run Android at all and needs to be stripped down?
Cheers
Kosti
@Kostiz
Android Oreo Go Edition is a lightweight distribution of Android that runs better than normal Android on devices with <= 1 GB of RAM
How to backup device's Stock ROM is eplained here.
Thanks again mate!
Seem I have to do a lot of reading and thankfully everything is here, just got to spend time to read and have a go!
BTW how do I go about using volume rockers and power button to move around the menu in recovery when there is none but only the two buttons as shown the reset and recovery buttons on the main board?
BTW, the current ROM installed boots into a special menu, all other settings are hidden, would there be a way to enable seeing all the items and when getting the the settings (gear icon) that pops up in the corner, only takes me to the standard wifi menu to choose a wifi, so it seems everything else is hidden, if by enabling these I could potentially not need to do anything other than stop the default application from starting up - if that makes any sense
Could I just get back into a adb shell and try
adb shell
su
pm enable applicationname
I have to read up on rooting first I assume before I do much more, this is getting exciting, LOL :good:
Kostiz said:
BTW how do I go about using volume rockers and power button to move around the menu in recovery when there is none but only the two buttons as shown the reset and recovery buttons on the main board?
Click to expand...
Click to collapse
You use Android's HOME button to navigate within the Recovery menu, use POWER button to select option.
Hi, fellas! Please help me with one of these Citaq H10 POS. All we have is bootloop with some custom ROM showing vendor's logo.
Forcing it into recovery gives me some dead android screen with "No command" text.
Please guide me through this challenge, cause I have no other option but to ressurect it somehow.
Good news is that I have another one that is working fine, so we could try cloning it or something. Please help!
Yet I can't attach pics, cause of few posts, but if needed I can PM some.
citaq h10-2
I am also stuck with this machine citaq h10-2 , i did use a wireless kb to move up/down and not the 2 buttons on the motherboard , i can talk with it with ADB but all you can do is put it in sideload to upload new firmware and put it in fastboot but in fastboot you only get a black screen , what I have don is > opened up developer mode but you have no OEM UNLOCK tick box in side so running any bootloader unlock dose not work and i have run them all, if you google this machine for flashing new firmware you only get XDA this forum, unless any body knows another place to get the info from please let us know as i do think this would make a nice tablet with printer, the firmware is 5.1.1 and would love to put 6.0 or above on it but. i did download some firmware and used sideload to install it but it come up with error , i did try and make a backup but cannot do it ?, I think the firmware was from a galaxy s5 , I am not into all this firmware flashing so I am learning as I go along and if I brick it up well it was for free any way as the takeaway was shutting down and he gave it to me so no loss, if any body knows how we can get 6.0 or above on this machine please let us know.
A big thank you to all that can help put android 6.0 or above on this tablet.
Did you guys take a look at the solution here ? It worked for me ! All with a 2k ohm resistor...
Hola, alguien tiene la Rom de este dispositivo?
I just received a NUU A5X/N5501LAT from Abbott. Interesting little device; I haven't seen a self-proclaimed "PDA" since the iPAQ days. It's running Android 9 on either a MT6739 or a MT8765, according to the FCC teardown photos.
Either way, it's severely locked down. The notification shade automatically wipes away, developer mode is blocked, most settings are restricted, and the launcher literally only allows four apps: Nuu App Store (which, coincidentally, only has two other apps in it), the AOSP Browser, the Abott Frestyle app that the device is meant to be used for, and Firefox.
It will take a MicroSD (and, entertainingly, has a micro-SIM slot despite not being a phone), and has a micro-USB port as well. I can't find a fastboot combination using its volume and power keys.
I'd love some thoughts on how to make this thing into a generic PDA without all the restrictions. I'm stuck without access to ADB at this point due to the developer settings being blocked, and I'm honestly at a bit of a loss as to where to go next. Thanks for your input!
Hi, I have the identical gadget; the NUU A5X, that is. Mine can't be made to change its boot sequence by holding down buttons, either, it seems. Mine is locked indentically I believe.
Mine responds to USB connection, but It does not seem useful.
I think It mighr be possible to connect to it via NFC or bluetooth, but I know far too little about those protocols, other than TCP/IP, if that runs on blueooth, then that might work. I might try make a grid of procedures to test all buttons
databoy2k said:
I just received a NUU A5X/N5501LAT from Abbott. Interesting little device; I haven't seen a self-proclaimed "PDA" since the iPAQ days. It's running Android 9 on either a MT6739 or a MT8765, according to the FCC teardown photos.
Either way, it's severely locked down. The notification shade automatically wipes away, developer mode is blocked, most settings are restricted, and the launcher literally only allows four apps: Nuu App Store (which, coincidentally, only has two other apps in it), the AOSP Browser, the Abott Frestyle app that the device is meant to be used for, and Firefox.
It will take a MicroSD (and, entertainingly, has a micro-SIM slot despite not being a phone), and has a micro-USB port as well. I can't find a fastboot combination using its volume and power keys.
I'd love some thoughts on how to make this thing into a generic PDA without all the restrictions. I'm stuck without access to ADB at this point due to the developer settings being blocked, and I'm honestly at a bit of a loss as to where to go next. Thanks for your input!
Click to expand...
Click to collapse
I think you could write and compile an executable to put the nuu service to sleep, or to withdraw its privileges, or to ovet-ride it. Unfortunately, I never got my development environment for Android set up.
I might be able to write a small utility in C,
even if it only makes a system() call. it might do the job. I have found that Firefox can download an arbitrary file. The executable would call an Intent, to do some job or other to "pull the plug".
I am looking to see what the possibilities are.
/Dave
I am interested as well in a solution
+1
I'm trying somethiing. It will take time. Don't hold your breath
I found out if you click idk how much times on the nu sogen in the Home Screen then you need to enter a password bud i don’t know the pasword
hi people, the same here, anyone have found something to make this brick useful ?
+1 to this
Acording to NUU Mobile Support, this phone can't booted into recovery mode, or be flashed.....
This phone is made to be used to track blood pressures in hospitals. I haven't tried to flash it yet, but I will
meme problématiques un genie ce cache parmis vous pour resoudre ce probleme???
Mod translation via GT: even problems a genius this hides among you to solve this problem???
Just been given one of these.
As already said holding the power and down or up buttons or all 3 has no effect.
and you cant click about phone 9 times to enable debugging mode for ADB access. which would be handy.
I can bluetooth files from one phone to it. but it doesnt know what to do with them. I put a sim card in, but there is no app to make phone calls.
The default browser does have permission to access system files, but I have no idea how to tell it to do so. Cant even get the camera to work. ah well maybe I should just use it to read my blood sugar levels. I guess I could buy a sensor to hammer into my arm hehh hehh
Same here, tried everything i could but no change.
If you download a file with their built-in browser that it can't open it will open up the file manager where I got some log files
Appearently serial over USB is enabled at some point during the boot process (?)
Use this tool: https://github.com/bkerler/mtkclient
And do: mtk meta FASTBOOT, then follow the instructions shown and finally do fastboot flashing unlock to perform an unlock
It will give you a message basically like:
if you do this, warranty will be void and a factory reset will be done. Press Volume up to continue.
Disclaimer: I haven't tested it to the end (shut it off instead of pressing volume up) since I want to do some more exploring with my currently installed toolset so I can find out more
tuxifan said:
Use this tool: https://github.com/bkerler/mtkclient
And do: mtk meta FASTBOOT, then follow the instructions shown and finally do fastboot flashing unlock to perform an unlock
It will give you a message basically like:
if you do this, warranty will be void and a factory reset will be done. Press Volume up to continue.
Disclaimer: I haven't tested it to the end (shut it off instead of pressing volume up) since I want to do some more exploring with my currently installed toolset so I can find out more
Click to expand...
Click to collapse
I tried it today, the result is weird, as MTKClient seems to react to the phone off, but not the ADB command that staying in the wait of any devices.
Also, the phone still can show battery status in that state? Normal?
It looks like it get in, then out of the FASTBOOT
Nuu Service is an extra launcher that opens and overlays when you start your smartphone. The default system launcher is Quickstep and you can change the launcher. However, the change is suppressed and immediately reversed. A reset is also blocked in the system. The standard browser is authorized to make changes to the system. There is definitely a weak point.
How can I execute key codes such as +#06#? I can't find the caller keypad.
You can also enter "secret codes" via a detour.
Open the standard browser, enter a bar/restaurant in google search, press call. The call keypad opens. I've already tested a few codes.
*#*#1111#*#* Hardwareversion
*#*#4636#*#* Display information Wifi, Phone-Info, Userstats
*#*#225#*#* Calendar Storage
Edit:
*#*#3646633#*#* Code for Engenering Mode - I get a message that developer mode is locked.
Just for fun I made a packet recording with the Fritzbox and looked at it with Wireshark. The device pings several servers in Germany, Finland and the USA.
The apps are actually online downloads. I did not expect.
I took a closer look at the ip's and found that "Sure Lock" runs on the device as a kiosk app. This can be configured as the customer wants. So Abbott/NUU.
If you type very quickly and often in succession on the home screen, a password input field will appear after a while.
If you had a password now...
Sure Lock's standard password (0000) obviously doesn't work
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Hi,
I found something interesting on this device. Indeed I can have access to notifications and in particular to NUU service, which when I keep pressing it appears a small i button, which allows access to the parameters of this application.
Obviously everything is blocked on it except in the advanced settings it's possible to deactivate the overlay to other apps and the possibility of modifying the system parameters.
After turning everything off and restarting the phone, I arrive not on the launcher but on the classic version of Android 9, which lasts a few seconds before glitching on the famous launcher.
I tried to exploit these few seconds at best but without success, I remain stuck on the lock screen.
Have you tried this generic bootloader-unlocking method?
GitHub - bkerler/edl: Inofficial Qualcomm Firehose / Sahara / Streaming / Diag Tools :)
Inofficial Qualcomm Firehose / Sahara / Streaming / Diag Tools :) - GitHub - bkerler/edl: Inofficial Qualcomm Firehose / Sahara / Streaming / Diag Tools :)
github.com