While the VDI host installer is an MSI file-type and can use the same switches as the standard client MSI installer, there are some registry policies that are specific to the VDI client. Learn more about VDI-specific mass deployment options.
The Zoom desktop client can be installed and configured in bulk for Windows in three different ways: via the MSI installer for both configuration and installation, an Active Directory administrative template utilizing Group Policy for configuration, or via registry keys for configuration.
Zoom Rooms for Windows can also be configured with an Active Directory administrative template utilizing Group Policy or registry keys.
If utilizing the MSI installer, Zoom can be deployed via GPO or SCCM. If installing the client via GPO script, install using a startup script for the desktop client. If you also want to deploy the Outlook plugin via GPO script, install using a logon script.
Installing with an Active Directory Administrative Template or registry keys, administrators can lock certain features and settings upon deployment of Zoom.
The desktop client can be enrolled in and managed through Zoom Device Management, which allows you to centrally control desktop client and mobile app settings in the Zoom web portal.
Learn to install Zoom with preconfigured settings for macOS, for Android devices, and for iOS devices. You can also use Zoom’s own Device Management platform to centrally configure desktop client and mobile app settings.
This article covers:
- How to download the desktop client MSI installer
- Priority of settings
- How to deploy and configure the Zoom desktop client
- How to download the Zoom Room MSI installer
- Configuration options for Zoom Rooms for Windows
- Configuration options for the Outlook Plugin for Windows
- Active Directory Administrative Template configuration
Prerequisites for using the IT admin installer
- MSI version of the Windows desktop client
- MSI installations require elevated administrative rights
Note: Some of the switches listed below require the latest version of the Zoom IT Installer.
How to download the desktop client MSI installer
- Go to the Zoom Download Center
- Click on Download for IT Admin, and then click one of the following links under the Zoom Client for Meetings section:
- Download MSI: Download the latest 32-bit version of the MSI installer.
- Download 64-bit Client: Download the latest 64-bit version of the MSI installer.
- Download ARM Client: Download the latest version of the MSI installer for ARM devices
Priority of settings
As settings can be configured in multiple places, with some only configurable by a Zoom or IT Admin and others configurable by the end user, it's imperative that admins understand the which settings take priority over others and how conflicting settings are handled.
If settings conflict, Zoom will use the following priority:
- Settings deployed and locked through ZDM.
- Settings deployed through GPO with zConfig (mandatory).
- Settings deployed in HKEY_CURRENT_USER.
- Settings deployed in HKEY_LOCAL_MACHINE.
- Setting deployed through MSI with zConfig (mandatory).
- Settings deployed with the Restrict in-meeting features for users joining meetings setting.
- Client setting selected by the user.
- Settings deployed and unlocked through ZDM.
- Setting deployed through GPO with zRecommend.
- Settings deployed in HKEY_CURRENT_USER.
- Settings deployed in HKEY_LOCAL_MACHINE.
- Setting deployed through MSI with zRecommend.
- Web setting that are not locked.
Note: Zoom highly recommends fully testing a configuration before deployment, to ensure it achieves the desired results.
How to deploy and configure the Zoom desktop client
Command-line deployment options
The following options are configured as part of the main command-line deployment of the desktop client. A basic install configuration is provided below, and each option afterwards is bolded in each corresponding example.
For other common installation options, please refer to the Microsoft article for MSI installations.
Note: Registry entries for the following settings will be located in the following locations:
- 32-bit version: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\ZoomUMX\
- 64-bit version: HKEY_LOCAL_MACHINE\SOFTWARE\ZoomUMX\
| MSI option | Description | Deployment example | Value type |
|---|---|---|---|
| Basic Install | Standard command-line install example | msiexec /package ZoomInstallerFull.msi /lex zoommsi.log | - |
| Silent install | Installs the client without user interaction, any install windows, or immediate restart | msiexec /i ZoomInstallerFull.msi /quiet /qn /norestart /log install.log | - |
| Wait until the in-progress meeting is over before installing | Disables interaction of the package with the Restart Manager, prevents an immediate restart, and hides all UI of the process. | msiexec /i ZoomInstallerFull.msi /qn /norestart MSIRestartManagerControl=Disable | Boolean |
| zNoDesktopShortCut | Prevent the creation of a desktop shortcut on install or update. | msiexec /package ZoomInstallerFull.msi /lex zoommsi.log zNoDesktopShortCut=True | Boolean |
| zSilentStart |
Automatically start client in the system tray after reboot. | msiexec /package ZoomInstallerFull.msi /lex zoommsi.log zSilentStart=1 | Boolean |
| zSSOHost | Disabled by default, this option allows you to preconfigure the SSO URL. | msiexec /package ZoomInstallerFull.msi /lex zoommsi.log zSSOHost="vanity_URL" | String |
|
DisableAdvancedSharingService |
Disabled by default, this option can disable installing the CPT service, which can prevent prompting the UAC during the update process. When enabled, the client cannot use the Enable the remote control of all applications setting without a UAC prompt and the UAC prompts will appear during the update process. |
msiexec /package ZoomInstallerFull.msi /lex zoommsi.log DisableAdvancedSharingService=1 |
Boolean |
|
FirewallPortStart |
Set the inbound and outbound firewall rules for the Zoom client. Note: FirewallPortStart and FirewallPortEnd need to be configured together, as Zoom does not recommend enabling one without enabling the other. |
msiexec /package ZoomInstallerFull.msi /lex zoommsi.log FirewallPortStart="7200" FirewallPortEnd="17210" |
String |
|
AllowDowngrade |
By default, MSI installations* will not allow a lower version to be installed over the existing installation. This option allows this restriction to be bypassed. |
msiexec /i ZoomInstallerFull.msi AllowDowngrade=1 |
Boolean |
Important notes regarding AutoUpdate
The EnableSilentAutoUpdate, AlwaysCheckLatestVersion, ZoomAutoUpdate, and SetUpdatingChannel options are no longer supported.
Admins wanting to configure automatic download and installation of Zoom updates, based on Zoom's Slow and Fast release cadences or their own custom auto-update track, can refer to the Enterprise Auto Update policies.
Additional Configuration Options
The following options must be included and configured within one of the following parameters:
- zConfig: To set and require specific configurations, append the zConfig parameter to the end of your install choice.
-
msiexec /package ZoomInstaller.msi /norestart /lex msi.log ZConfig="account=your_account_id;nogoogle=1;nofacebook=1”
-
- zRecommend: To set specific configurations as the default, but allow users to change them within the Zoom desktop client, deploy with zRecommend.
-
msiexec /i ZoomInstallerFull.msi ZRecommend="AudioAutoAdjust=1"
-
Multiple options can be configured in either, with each option and its corresponding value being separated from the next by a semicolon (;).
If you want to force certain settings, but allow users to change other settings you’ve set as default, use both zConfig and zRecommend. For example, this install configuration
-
msiexec /i ZoomInstallerFull.msi zConfig="nogoogle=1" zRecommend="AudioAutoAdjust=1"
disables the Google login method entirely on the client, while Auto-adjust audio is defaulted to “auto”, but can be disabled and manually set by the user.
Note: If a setting has been set in both zConfig and zRecommend, zConfig will take priority and lock the setting, which cannot be changed by the user. Refer to the Priority of Settings section to understand how other conflicting settings are resolved.
| MSI option | Description | Default state and value | Value type |
|---|---|---|---|
| Install and update | |||
| AutoStartAfterReboot | Automatically start Zoom when Windows starts. Note: Once deployed, the desktop client must be started manually once, before this policy will take effect on subsequent reboots. | Disabled, 0 | Boolean |
| Min2Tray | Minimize Zoom to system tray when window is closed. Note: Once deployed, the desktop client must be started manually once, before this policy will take effect on subsequent reboots. | Enabled, 1 | Boolean |
| DisableUpdateTo64Bit | Control if the desktop client can upgrade to the 64-bit version upon update, if the 32-bit version is installed on a 64-bit system. | Disabled, 0 | Boolean |
| SetEnrollToken4CloudMDM, token | Enroll your device into Zoom Device Management with a token provided from the web portal. | Disabled, (empty) | String |
| DisableZoomIfNotZDMManaged | Disables Zoom app functionality if enrollment into Zoom Device Management fails, preventing use of the app without admin-deployed settings and restrictions. | Disable, 0 | Boolean |
| kCmdParam_InstallOption |
The following options can be enabled and must be entered as the combined numeric value of all the options you want enabled as the string value: 1 - Turn off video when joining a meeting. 8 - Default login to SSO. 16 - Automatically enter full-screen when viewing shared content. 32 - Automatically fit to window when viewing shared content. 128 - Allow remote control of all applications. For example, to enable Automatically connect with computer audio (2) and HD video (64), set this option as "kCmdParam_InstallOption=66". | Disabled, (empty) | String |
| AddFWException | Disable UAC prompt when logging into Zoom. | Enabled, 1 | Boolean |
| InstallVDIAutoUpdatePlugin |
When a VDI environment is detected, the ZoomPluginAutoUpdateService.dll is installed so that VDI auto-update is available for use. | Enabled, 1 | Boolean |
| DisableZoomOnboarding |
Disables the onboarding experience displayed the first time the Zoom desktop client is installed. (0) - Allow onboarding experience. (1) - Disable onboarding experience. | Disabled, 0 | Boolean |
| DisableDiscoverWhatsNew |
Disables the What's New window, which highlights new features and enhancements for the desktop client version currently installed. | Disabled, 0 | Boolean |
| Network | |||
| EnableDiagnostic | Controls the ability for the desktop client to access the Network Connectivity Tool, which allows a user to test their network connection with Zoom services. | Enabled, 1 | Boolean |
| BlockUntrustedSSLCert | Block connections to untrusted SSL certificates. | Enabled, 1 | Boolean |
| SetNoRevocationCheckUrls | Allow specific URLs to be trusted and bypass the untrusted certificate prompt if the certificate is revoked. Multiple domains should be separated by ";", for example "hooli.com;hooli.org". | Disabled, (empty) | String |
| DisableCertPin | Disable Certificate Pinning. | Disabled, 0 | Boolean |
| ProxyPac, your_pac_url | Set proxy server for desktop client with PAC URL. | Disabled, (empty) | String |
| UseBackupPacForDetectFailPolicy | Set to have the app use the last available PAC, if retrieving a newer PAC fails. | Disabled, 0 | Boolean |
| ProxyServer, proxy_address | Set a proxy server for desktop client as named proxy. Example: server: port | Disabled, (empty) | String |
| ProxyBypass, bypass_rule | Set proxy bypass rule for the desktop client. Each value should be separated by a ; | Disabled, (empty) | String |
| PreproxyDetectPolicy | Controls the use of an admin-defined proxy pre-detection method, which can be faster for some PAC cases. If this option is not defined, the default Zoom proxy detection is used. Note: This option affects only Windows devices. | Disabled, (empty) | String |
| DisableAudioOverProxy | Prevent audio traffic over proxies. | Disabled, 0 | Boolean |
| DisableVideoOverProxy | Prevent video traffic over proxies. | Disabled, 0 | Boolean |
| DisableSharingOverProxy | Prevent screen sharing traffic over proxies. | Disabled, 0 | Boolean |
| BandwidthLimitUp, amount | Set maximum sending bandwidth for the desktop client. Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. | Disabled, (empty) |
String (all values in Kbps)
|
| BandwidthLimitDown, amount | Set maximum receiving bandwidth for the desktop client. Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. | Disabled, (empty) |
String (all values in Kbps)
|
| IgnoreBandwidthLimits | Ignore bandwidth limit set on web settings. (Useful for exceptions to bandwidth restrictions) | Disabled, 0 | Boolean |
| EnableIndependentDataPort | If enabled, the client will use the following ports for media transmission: Audio: 8803 Screen share: 8802 Video: 8801 | Disabled, 0 | Boolean |
| ShareSessionDisableUDP | Send screen share traffic over TCP, instead of UDP. | Disabled, 0 | Boolean |
| DisableDirectConnection2Web | Disable all direct connections to Zoom web service. | Disabled, 0 | Boolean |
| DisableP2PStunTraffic | Disable P2P STUN traffic from the Zoom app. This traffic is the Zoom app checking if admin web settings allow for P2P meetings on the network. | Disabled, 0 | Boolean |
| EnableWinExtendProtectedAuth | Enable to Support Windows Extended Protection with NTLM authentication. | Disabled, 0 | Boolean |
| Authentication | |||
| DisableMultipleAccountsSwitch | Disable the ability for users to be signed-in to multiple accounts and easily switch between them. If disabled, users must manually sign out and then sign in to another account. | Disabled, 0 | Boolean |
| NoFacebook | Remove Facebook login option. | Disabled, 0 | Boolean |
| NoGoogle | Remove Google login option. | Disabled, 0 | Boolean |
| EnableAppleLogin | Allow access to Apple login option. | Enabled, 1 | Boolean |
| NoSSO | Remove SSO login option. | Disabled, 0 | Boolean |
| DisableLoginWithEmail | Remove Email login option. | Disabled, 0 | Boolean |
| DisableUserSignUp | Disable the Sign Up option on the Zoom app, which would otherwise be displayed with Join a Meeting and Sign In options upon opening the Zoom app. | Disabled, 0 | Boolean |
| DisableKeepSignedInWithSSO | Require fresh SSO login upon client start. | Disabled, 0 | Boolean |
| DisableKeepSignedInWithGoogle | Require fresh Google login upon client start. | Disabled, 0 | Boolean |
| DisableKeepSignedInWithFacebook | Require fresh Facebook login upon client start. | Disabled, 0 | Boolean |
| KeepSignedIn | Keep the user signed in to the client when relaunched. (Email login only) | Disabled, 0 | Boolean |
| AutoSSOLogin | Defaults login to SSO. | Disabled, 0 | Boolean |
| ForceSSOUrl=your_company | Set and lock the default SSO URL for SSO login. For example, hooli.zoom.us would be set as "ForceSSOUrl=hooli". | Disabled, (empty) | String |
| EnableEmbedBrowserForSSO | Use embedded browser in the client for SSO. | Disabled, 0 | Boolean |
| SetWebDomain, domain | Sets the web domain for logging in or joining a meeting. By default, the value is https://zoom.us or https://zoom.com. | Disabled, (empty) | String |
| DisableAutoLaunchSSO | Prevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL. | Disabled, 0 | Boolean |
| EnablePhoneLogin | Enables login with phone authentication. (A) | Disabled, 0 | Boolean |
| EnableAlipayLogin | Enables login with Alipay authentication. (A) | Disabled, 0 | Boolean |
| EnablQQLogin | Enables login with QQ authentication. (A) | Disabled, 0 | Boolean |
| EnableWeChatLogin | Enables login with WeChat authentication. (A) | Disabled, 0 | Boolean |
| Account, your_account_id | Restrict the client to only join meetings hosted by the specified account IDs. (B) | Disabled, (empty) | String |
| Login_Domain=domain | Set the email address domain that users can login with, each separated by "&". Example: zoom.us & hooli.com | Disabled, (empty) | String |
| EnableCloudSwitch | Enable the option to switch between Zoom commercial (default) and Zoom for Gov. | Disabled, 0 | Boolean |
| EnforceSignInToJoin |
Require users to be authenticated before joining a meeting with the desktop client. Authentication can take place through the the web portal, if joining through join URL. | Disabled, 0 | Boolean |
| EnforceAppSignInToJoin |
Require authentication on the desktop client to join any meeting on the desktop client. | Disabled, 0 | Boolean |
| EnforceSignInToJoinForWebinar |
Require users to be authenticated before joining a webinar with the desktop client. Authentication can take place through the the web portal, if joining through join URL. | Disabled, 0 | Boolean |
| EnforceAppSignInToJoinForWebinar |
Require authentication on the desktop client to join any webinar on the desktop client. Note: This policy will interfere with joining webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well. | Disabled, 0 | Boolean |
| SetDevicePolicyToken, device_token | Require internal meeting authentication. (C) | Disabled, (empty) | String |
| General meeting and client options | |||
| UseDualMonitor | Enable dual monitor mode. | Disabled, 0 | Boolean |
| FullScreenWhenJoin | When starting or joining a meeting, the meeting window will enter full-screen. | Disabled, 0 | Boolean |
| AutoHideToolbar | Set use of Always show meeting controls setting. | Enabled, 0 | Boolean |
| EnableAutoCopyConfInvitationURL | Enables the Copy invite link when starting a meeting option found within General app settings. | Disabled, 0 | Boolean |
| UsePMI | Always use PMI for instant meetings. | Disabled, 0 | Boolean |
| DefaultUsePortraitView | Default to Portrait Mode upon opening Zoom. | Disabled, 0 | Boolean |
| DisableClosedCaptioning | Disable the use of all captioning. | Disabled, 0 | Boolean |
| DisableManualClosedCaptioning | Disable the use of manual and third-party captioning. This does not affect automated captioning. | Disabled, 0 | Boolean |
| DisableAssignTypist | Disable the ability for users to assign a participant the role of manually entering captions. This does not affect the use of automated captions or captions provided by a third-party service. | Disabled, 0 | Boolean |
| DisableQnA | Disable the use of Q&A in webinars. | Disabled, 0 | Boolean |
| DisableMeetingReactions | Disable the use of Meeting Reactions. | Disabled, 0 | Boolean |
| DisableNonVerbalFeedback | Disable the use of Non-verbal feedback. | Disabled, 0 | Boolean |
| DisableWebinarReactions | Disable the use of Webinar Reactions. | Disabled, 0 | Boolean |
| DisableSideCar | Disable the use of Webinar Resources, which allows webinar hosts with the ability to link to external resources, such as newsletter sign-ups, learn more pages, and others. | Disabled, 0 | Boolean |
|
DisableBroadcastBOMessage | Disable the ability for the host to broadcast a message to all open breakout rooms. | Disabled, 0 | Boolean |
| ConfirmWhenLeave | Confirm before leaving a meeting. | Enabled, 1 | Boolean |
| ShowConnectedTime | Enable the Show Meeting Timers setting. This setting allows for viewing the current duration of the meeting, or the remaining time, based on scheduled duration. | Disabled, 0 | Boolean |
| MuteWhenLockScreen | Automatically mute the microphone and turn off video, when the screen is locked during a meeting. | Enabled, 1 | Boolean |
| EnableRemindMeetingTime | Display reminder notifications for upcoming meetings. | Disabled, 0 | Boolean |
| DisableInMeetingZoomNotes | Disables the use of Zoom Notes during meetings. | Disabled, 0 | Boolean |
| AI Companion | |||
|
DisableSmartMeetingSummaries |
Disable the in-meeting toolbar option for Meeting Summary. If disabled, users will not be able see or interact with the AI Companion feature, but their audio will still be transcribed and available for questions by others. | Disabled, 0 | Boolean |
|
DisableAICQueries |
Disable the in-meeting toolbar option for AI Companion. If disabled, users will not be able see or interact with the AI Companion feature, but their audio will still be transcribed and available for questions by others. | Disabled, 0 | Boolean |
| Video | |||
| zDisableRecvVideo | Disable receiving video. | Disabled, 0 | Boolean |
| zDisableSendVideo | Disable sending video. | Disabled, 0 | Boolean |
| DisableVideo | Automatically turn off camera when joining a meeting. | Disabled, 0 | Boolean |
| Use720pByDefault | Use HD video in meetings. | Disabled, 0 | Boolean |
| EnableMirrorEffect | Enable mirroring of your video. Mirror effect only affects your view of your video. | Enabled, 1 | Boolean |
|
HideSelfView | Controls the use of the Hide Self View option. | Disabled, 0 | Boolean |
| EnableFaceBeauty | Enable Touch up my appearance. | Disabled, 0 | Boolean |
| SetFaceBeautyValue | Used in conjunction with EnableFaceBeauty, this allows you to set the exact intensity of the Touch up my appearance filter. | (Disabled), 25 | String |
| EnableLightAdaption | Enable Adjust for low-light video setting. | Disabled, 0 | Boolean |
| EnableAutoLightAdaption | Set mode of adjusting low-light video feature. This is dependent on the EnableLightAdaption option. 1 - Auto 0 - Manual | Auto, 1 | Boolean |
| SetLightAdaptionManualValue | Used in conjunction with EnableLightAdaption, this allows you to set the exact intensity of the low-light adjustment. | (Disabled), 20 | String |
| AlwaysShowVideoPreviewDialog | Always show the video preview when joining a meeting. | Enabled, 1 | Boolean |
| HideNoVideoUser or HideNonVideoUsers | Hide non-video participants by default. | Disabled, 0 | Boolean |
| EnableSpotlightSelf | Show self as the active speaker when speaking. | Disabled, 0 | Boolean |
| Enable49video | Set max number of participants displayed in Gallery View to 49 participants per screen. | Disabled, 0 | Boolean |
| EnableHardwareAccForVideoSend | Use hardware acceleration for video processing, when sending video. | Enabled, 1 | Boolean |
| EnableHardwareAccForVideoReceive | Use hardware acceleration for video processing, when receiving video. | Enabled, 1 | Boolean |
| EnableTemporalDeNoise | Remove noise from video feeds during processing. | Enabled, 1 | Boolean |
| VideoRenderMethod | Set the video rendering method: 0 - Auto 1 - Direct3D11 Flip Mode 2 - Direct3D11 3 - Direct3D9 4 - GDI | Auto, 0 | String |
| SetVideoRenderingPostProcessing |
Adjust the use of video rendering post processing used by the desktop client. | Auto, 0 | String |
| SetVideoCapturingMethod | Adjust the method of video capture used by the desktop client. 0 - Auto 1 - Direct Show 2 - Media Foundation | Auto, 0 | String |
| EnableGPUComputeUtilization | Use hardware acceleration for video processing. | Enabled, 1 | Boolean |
| Audio | |||
| DisableComputerAudio | Disable and remove the Computer Audio from the meeting audio options. | Disabled, 0 | Boolean |
| SetUseSystemDefaultMicForVoip | Use the default system microphone in Windows. | Disabled, 0 | Boolean |
| SetUseSystemDefaultSpeakerForVoip | Use the default system speakers in Windows. | Disabled, 0 | Boolean |
| SetUseSystemCommunicationMicForVOIP | Use the system default communication microphone for computer audio. | Disabled, 0 | Boolean |
| SetUseSystemCommunicationSpeakerForVOIP | Use the system default communication speaker for computer audio. | Disabled, 0 | Boolean |
| AudioAutoAdjust | Enable Automatically adjust microphone volume audio setting. | Enabled, 1 | Boolean |
| SetSuppressBackgroundNoiseLevel |
Set level of background noise suppression: | Auto, 0 | String |
| EnableOriginalSound | Enable the Original sound for musicians audio profile for the meeting audio input. Note: This option is not supported within the zRecommend parameter. | Disabled, 0 | Boolean |
| AutoJoinVOIP | Automatically connect audio with computer audio when joining a meeting. | Disabled, 0 | Boolean |
| MuteVoipWhenJoin | Mute computer audio microphone when joining a meeting. | Disabled, 0 | Boolean |
| EnableHIDControl | Enables control of USB devices by the Zoom client. This correlates to the Sync buttons on headset option within app Audio settings. | Enabled, 1 | Boolean |
| SetAudioSignalProcessType |
Set audio signal processing for Windows audio devices: | Auto, 0 | String |
| Screen sharing | |||
| DisableScreenShare | Disable the ability to share your screen in meetings and webinars. Note: This does not disable incoming screen sharing from other participants. | Disabled, 0 | Boolean |
| NoAeroOnWin7 | Disable Aero mode when screen sharing on Windows 7 system. | Enabled, 1 | Boolean |
| AutoFullScreenWhenViewShare | When viewing shared content, the content window automatically goes fullscreen. | Enabled, 1 | Boolean |
| AutoFitWhenViewShare | When viewing shared content, the content window automatically adjusts to fit the viewer's screen. | Enabled, 1 | Boolean |
| ShowZoomWinWhenSharing | Show Zoom windows when screen sharing. | Disabled, 0 | Boolean |
| EnableSplitScreen | Use Side-by-Side mode when viewing shared content. | Disabled, 0 | Boolean |
| zDisableAnnotation | Disable and remove the ability to annotate over shared screen. | Disabled, 0 | Boolean |
| EnableShareAudio | Enable the Share computer audio option when sharing. | Disabled, 0 | Boolean |
| EnableShareVideo | Enable the Optimize for video clip option when sharing. | Disabled, 0 | Boolean |
| DisableWhiteBoard | Disable Classic Whiteboard feature. | Disabled, 0 | Boolean |
| DisableInMeetingWhiteBoard | Disable the Zoom Whiteboard feature in meetings and webinars. | Disabled, 0 | Boolean |
| DisableSlideControl | Disable Slide Control feature. | Disabled, 0 | Boolean |
| DisableDesktopShare | Disable the option to share your desktop when screen sharing. | Disabled, 0 | Boolean |
| DisableRemoteControl | Disable Remote Control feature. | Disabled, 0 | Boolean |
| DisableRemoteSupport | Disable Remote Support feature. | Enabled, 1 | Boolean |
| RemoteControlAllApp | Allow remote control of all applications. | Disabled, 0 | Boolean |
| EnableShareClipboardWhenRemoteControl | Allow clipboard access during remote control. | Disabled, 0 | Boolean |
| PresentInMeetingOption | Set sharing option when sharing your screen within a meeting: 0 - Show all sharing options 1 - Automatically share desktop | Show all sharing options, 0 | Boolean |
| EnableDoNotDisturbInSharing | Silence system notifications when sharing desktop. | Enabled, 1 | Boolean |
| LegacyCaptureMode | Disable GPU acceleration. | Disabled, 0 | Boolean |
| SetScreenCaptureMode | Set the screen capture mode: 0 - Auto 1 - Legacy operating systems 2 - Share with window filtering 3 - Advanced share with window filtering 4 - Advanced share without window filtering | Auto, 0 | String |
| EnableHardwareOptimizeVideoSharing | Use hardware acceleration to optimize video sharing. | Enabled, 1 | Boolean |
| Zoom Phone | |||
| HidePhoneInComingCallWhileInMeeting | Prevent incoming call notifications while in a meeting. | Disabled, 0 | Boolean |
| EnableLaunchApp4IncomingCalls | Control the Launch an external app or a URL for incoming calls option in the client. This must be used in coordination with SetCommand4IncomingCalls, so that the URL can be configured as well. | Disabled, 0 | Boolean |
| SetCommand4IncomingCalls | Set the URL used when the client receives an incoming call. This must be used in coordination with EnableLaunchApp4IncomingCalls. | Disabled, (empty) | String |
| ClickToCallDefault |
Choose which Zoom service is used when clicking a phone number to place a call. 0 - Zoom Phone | Zoom Phone, 0 | String |
| In-meeting Chat | |||
| zDisableChat | Disable in-meeting chat. | Disabled, 0 | Boolean |
| zDisableFT | Disable in-meeting file transfer. (sending or receiving) | Disabled, 0 | Boolean |
| DisableMeeting3rdPartyFileStorage | Disable in-meeting 3rd party file transfer. | Disabled, 0 | Boolean |
| Zoom Apps | |||
| DisableZoomApps | Hide the Zoom Apps button. | Disabled, 0 | Boolean |
|
DisableZoomAppsGuestAccess | Control the ability for users to utilize a Zoom App in Guest mode. | Disabled, 0 | Boolean |
| Background and Filters | |||
| DisableVirtualBkgnd | Disable Virtual Background feature. | Disabled, 0 | Boolean |
| DisableVideoFilters | Disable Video filters feature. | Disabled, 0 | Boolean |
| EnableAutoReverseVirtualBkgnd | Require post-meeting virtual background auto-reversal. | Disabled, 0 | Boolean |
| Recording | |||
| RecordPath, C:/your_recording_path | Set the default recording location for local recordings. | Documents folder | String |
| zDisableCMR | Disable recording to the cloud. | Disabled, 0 | Boolean |
| zDisableLocalRecord | Disable recording locally on the device. | Disabled, 0 | Boolean |
| NotifyCMRAvailable | Control the desktop client setting Show notifications when a new recording is available. | Enabled, 1 | Boolean |
| Zoom Room and Room System calling | |||
| DisableDirectShare | Disable direct share with Zoom Rooms option. | Disabled, 0 | Boolean |
| EnableStartMeetingWithRoomSystem | Display the Call Room System button on the home screen of the desktop client. | Disabled, 0 | Boolean |
| AppendCallerNameForRoomSystem | Display the caller name for room systems being invited to Zoom meeting. | Disabled, 0 | Boolean |
| PresentToRoomWithAudio | Share sound when screen sharing to a Zoom Room. | Enabled, 1 | Boolean |
| PresentToRoomOptimizeVideo | Optimize screen sharing for video clip when sharing to a Zoom Room. | Enabled, 1 | Boolean |
| PresentToRoomOption | Set sharing option when sharing to a Zoom Room: 0 - Show all sharing options 1 - Automatically share desktop | Automatically share desktop, 1 | Boolean |
| Team Chat | |||
| KeepOnlyOneSectionOpenInChat | Controls the state of the Only allow one section opened at a time setting for the desktop app, found under the Team Chat section of app settings. | Disabled, 0 | Boolean |
| SeparateIMChatAndChannel | Controls the state of the Organize by section setting for the desktop app, found under the Team Chat section of app settings. | Disabled, 0 | Boolean |
| zDisableIMLinkPreview | Disable link previews. | Disabled, 0 | Boolean |
| SetMessengerDoNotDropThread | Move messages with new replies to the bottom of the chat/channel. | Enabled, 1 | Boolean |
| ShowProfilePhotosInChat | Controls if user profile pictures are shown in Zoom Chat. | Enabled, 1 | Boolean |
| ShowVoiceMessageButton | Allow use of the Send audio message option. | Enabled, 1 | Boolean |
| ShowVideoMessageButton | Allow use of the Send video message option. | Enabled, 1 | Boolean |
| AlwaysShowIMNotificationBanner | Show notifications for new Zoom Chat messages until dismissed. | Disabled, 0 | Boolean |
| PlaySoundForIMMessage | Play audio notifications when an IM message is received. | Enabled, 1 | Boolean |
| ShowIMMessagePreview | Allow message previews in system notifications when a chat message is received. | Enabled, 1 | Boolean |
| MuteIMNotificationWhenInMeeting | Mute chat system notifications when in a meeting. | Enabled, 1 | Boolean |
| DisableIMFileTransfer | Restricts the ability of users to send files through Team Chat, except for any domains provided in the AllowedIMFileTransferDomain policy. | Disabled, 0 | Boolean |
| AllowedIMFileTransferDomain | Allows admins to specify domains that are allowed to send files through Team Chat when the DisableIMFileTransfer policy is enabled. Multiple domains can be separated by an &, for example: Domain1.com&Domain2.com Note: If the DisableIMFileTransfer policy is enabled and no domains are specified through this policy, file transfers through Team Chat are entirely disabled for all domains. | Disabled, (empty) | String |
| Miscellaneous | |||
| EmbedUserAgentString | Embed a specified user agent string for all HTTP requests from Zoom client. | Disabled, use default user agent string | String |
| EmbedDeviceTag | Embed a specified device tag string for all HTTP requests from Zoom client application. This string will be appended to the head of the regular HTTP requests. | Disabled, (empty) | String |
| EnableAutoUploadDumps | Automatically send dump files to Zoom to improve services. | Disabled, 0 | Boolean |
| EnableAutoUploadMemlogs | Automatically send critical-failure-logs to Zoom to improve services. | Disabled, 0 | Boolean |
| IntegrateZoomWithOutlook | Show Zoom contact status in Outlook, and sets Zoom as the default chat, meeting, and phone app in Outlook. | Disabled, 0 | Boolean |
| SetAccEventsOptions | Set what alerts will be read by a screen reader. The following options are available and must be entered as the combined numeric value of all the alerts you want in the string: 1 - IM chat received 2 - Participant joined/left meeting 4 - Participant joined/left waiting room 8 - Audio muted/unmuted by host 16 - Video stoped by host 32 - Screen sharing started stoped by participant 64 - Recording permission granted revoked 128 - Public meeting chat received 256 -Private meeting chat received 512 - File uploaded to in-meeting chat 1024 - Closed captioning available 2048 - Closed captioning typing privilege granted/revoked 4096 - Host controls granted/revoked 8192 - Co-host controls granted/revoked 16384 - Remote control permission granted/revoked 32768 - Livestream started/stopped 65536 - Participant raised/lowered hand 131072 - Q&A question received 262144 - Q&A answer received 524288 - Webinar role changed to panelist 1048576 - Webinar role changed to attendee | All alerts will be read, (empty) | String |
| Intercloud Policies | |||
| OverrideEnforceSigninIntercloud | Override the following policies to allow users to join a Zoom meeting or webinar hosted on the Zoom for Government Cloud (ZfG Cloud) without the need to authenticate:
| Disabled, 0 | Boolean |
| Intercloud_DisableAllFeatures | Disables all features except for audio and video for meetings hosted on the ZfG cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableMeetingChat | Disables the use of in-meeting chat on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableShareScreen | Disables the local ability to share screen on meetings hosted on the ZfG Cloud. This does not affect others' ability to shared content. | Disabled, 0 | Boolean |
| Intercloud_DisableMeetingReactions | Disables the use of meeting reactions on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableMeetingFileTransfer | Disables the use of file transfers through in-meeting chat on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableAnnotation | Disables the local ability to annotate on shared content in meetings hosted on the ZfG Cloud. This does not affect others' ability to annotate. | Disabled, 0 | Boolean |
| Intercloud_DisableWhiteBoard | Disables the use of in-meeting whiteboarding on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableLocalRecording | This option disables the ability to locally record meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableClosedCaptioning | This option disables the use of captioning features on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableRemoteControl | This option disables the remote control of shared screens in meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableMeetingPolls | This option disables the use of polling in meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableComputerAudio | This option disables the use of computer audio for connecting to meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Zoom Mesh | |||
| EnableMeshNetworking |
Control client use of Zoom Mesh, even if deployed on your account and local network. | Enabled, 1 | Boolean |
|
MeshMulticastIP |
When utilizing Zoom Mesh, this policy allows admins to specify a valid IP address to be a UDP multicast IP for Zoom apps to declare themselves and detect each other in their local sub-network (255.255.255.0). Admins can choose other IP addresses within the range of [224.0.0.1, 239.255.255.255]. | 224.0.0.1, <empty> | String |
|
MeshMulticastPort | When utilizing Zoom Mesh, this policy allows an admin to specify a valid port to be used as the UDP multicast port to communicate with other Zoom Mesh nodes on the network. | Port 36699, 0 | String |
|
MeshListenPortRange | When utilizing Zoom Mesh, this policy allows a valid port range to be used to set up listen sockets for connection requests between Mesh parents and children nodes. The nodes will also use this range to send signals and media data. | 18801-19800, <empty> | String |
|
EnableGuestMesh | When utilizing Zoom Mesh, this policy allows users to join an external Webinar as a guest through another account's local Zoom Mesh-enabled network. Other requirements must be met, such as the device having the minimum supported client version for Mesh connections and the external account's associated account setting in the web portal also enabled. | Disabled, 0 | Boolean |
Notes:
- (A) These options are only available for devices in the China region.
- (B) Please have an account admin or owner contact Zoom Support to acquire your account ID.
- (C) Please have an account admin or owner contact Zoom Support to have this enabled for use. The owner will also need to edit a role to have view/edit access to Device Policy Management. The required token can then be retrieved from the Device Policy Management page.
You can also configure with Microsoft command-line options.
How to deploy with Intune
- Sign in to the Intune Device Management dashboard.
- Click Apps.
- Under the By platform section, click Windows.
- Click Add.
- For App type, select Line-of-business app, then click Select.
- Click Select app package file.
- Click Select a file, and choose the ZoomInstallFull.msi.
- Click OK.
- In the App information tab enter the following:
- Description- Enter the description of the app, i.e Zoom Meeting app.
- Publisher- Enter Zoom Video Communications.
- App install context- Click Device.
- Command-line arguments- Enter any MSI installation switches as provided in sections above.
- Click Next.
- Add any desired Scope tags.
- Click Next.
- Choose if the app is required for any specific user groups, all users, and/or all devices.
- Click Next.
- Review the deployment summary, then click Create.
Uninstall switches
To uninstall Zoom completely, please use the following Clean Zoom uninstaller (updated November 30, 2023). It is generally not necessary to use the clean uninstaller when updating to a new version of Zoom, as deploying the new version will replace the former.
The following switches are available when running the installer:
| MSI option | Description |
|---|---|
| /silent | Removes Zoom silently. |
| /keep_outlook_plugin | Removes Zoom, but leaves the Outlook Plugin installed. |
| /keep_lync_plugin | Removes Zoom, but leaves the Lync/Skype for Business Plugin installed. |
| /keep_notes_plugin | Removes Zoom, but leaves the Notes Plugin installed. |
| /vdi_clean |
Removes the following Zoom VDI client and plugins:
By default, this will also remove Outlook, Lync, and Notes plugins, but this can be prevented by using the options above to keep them in place. |
| /vdi_plugin | This has the same logic as /vdi_clean, but removes the VDI plugin only. This includes:
|
| /vdi_client | This has the same logic as /vdi_clean, but removes the VDI client only. This includes the both the 32-bit and 64-bit versions of the VDI client (MSI). |
Note: Use of the clean uninstaller will completely remove the Zoom client, as well as the Zoom plugin for Outlook. The Outlook add-in, Chrome/Firefox extensions, and GSuite add-on are unaffected.
How to download the Zoom Room MSI installer
- Go to the Zoom Download Center
- Click on Download for IT Admin, and then click one of the following links under the Zoom Rooms Client section:
- Download MSI: Download the latest 32-bit version of the MSI installer.
- Download 64-bit Client: Download the latest 64-bit version of the MSI installer.
Configuration options for Zoom Rooms for Windows
The following options are configured as part of the main command-line deployment of the Zoom Rooms client. A basic deployment example is given for each item, with each option bolded in its corresponding example.
For other common installation options, please refer to the Microsoft article for MSI installations.
| MSI option | Description | Deployment example | Value type |
|---|---|---|---|
|
Silent install |
Install the client without user interaction, any install windows, or immediate restart. |
msiexec /i ZoomRoomsInstaller.msi /quiet Silent=true |
Boolean |
| EnableSSLVerification | Verify SSL certificate. | msiexec /i ZoomRoomsInstaller.msi EnableSSLVerification=true | Boolean |
|
AcceptGDPR |
Automatically accept the GDPR license. |
msiexec /i ZoomRoomsInstaller.msi AcceptGDPR=true |
Boolean |
|
SystemAutoLogin SystemUserName SystemPassword |
Automatically login with the provided username and password. |
msiexec /i ZoomRoomsInstaller.msi SystemAutoLogin=true SystemUserName="windows user name" SystemPassword="windows password" |
SystemAutoLogin - Boolean UserName and Password - String |
| SystemOption | The following options are available and must be entered as the combined numeric value of all the options you want enabled in the string: 1 - Automatically lock the screen 2 - Disable password upon wakeup 4 - Disable Cortana 8 - Disable notifications 16 - Disable Windows updates 32 - Enable High Performance Power 64 - Disable Hibernation 128 - Never Sleep 256 - Never Turn Off Display For example, to disable Cortana (4) and system notifications (8), set this as "SystemOption=12". | msiexec /i ZoomRoomsInstaller.msi SystemOption=12 | String |
Configuration options for the Outlook Plugin for Windows
The following options are configured as part of the main command-line deployment of the Zoom Outlook plugin.
For other common installation options, please refer to the Microsoft article for MSI installations.
| MSI option | Description | Default state and value | Value type |
|---|---|---|---|
|
UsePMI |
Always use PMI when scheduling meetings. |
Disabled, 0 |
Boolean |
|
AutoUpdate |
Allow the user to check for updates for the Outlook plugin. |
Enabled, 1 |
Boolean |
|
StandardUserUpdate |
Allow standard user updating. This is ignored if AutoUpdate is disabled. |
Disabled, 0 |
Boolean |
Active Directory Administrative Template configuration
For a breakdown of the policies and options available for configuration, please see our list of available Group Policies and templates.