Mass-deploying with preconfigured settings for Windows


 

The Zoom desktop client can be installed and configured in bulk for Windows in three different ways: via the MSI installer for both configuration and installation, an Active Directory administrative template utilizing Group Policy for configuration, or via registry keys for configuration.

Zoom Rooms for Windows can also be configured with an Active Directory administrative template utilizing Group Policy or registry keys.

If utilizing the MSI installer, Zoom can be deployed via GPO or SCCM. If installing the client via GPO script, install using a startup script for the desktop client. If you also want to deploy the Outlook plugin via GPO script, install using a logon script.

Installing with an Active Directory Administrative Template or registry keys, administrators can lock certain features and settings upon deployment of Zoom. 

The desktop client can be enrolled in and managed through Zoom Device Management, which allows you to centrally control desktop client and mobile app settings in the Zoom web portal. 

note icon
While the VDI host installer is an MSI file-type and can use the same switches as the standard client MSI installer, there are some registry policies that are specific to the VDI client. Learn more about VDI-specific mass deployment options.

Learn to install Zoom with preconfigured settings for macOS, for Android devices, and for iOS devices. You can also use Zoom’s own Device Management platform to centrally configure desktop client and mobile app settings.

This article covers:

Prerequisites for using the IT admin installer

Note: Some of the switches listed below require the latest version of the Zoom IT Installer.

How to download the desktop client MSI installer

  1. Go to the Zoom Download Center
  2. Click on Download for IT Admin, and then click one of the following links under the Zoom Client for Meetings section:
    • Download MSI: Download the latest 32-bit version of the MSI installer.
    • Download 64-bit Client: Download the latest 64-bit version of the MSI installer.
    • Download ARM Client: Download the latest version of the MSI installer for ARM devices

Priority of settings

As settings can be configured in multiple places, with some only configurable by a Zoom or IT Admin and others configurable by the end user, it's imperative that admins understand the which settings take priority over others and how conflicting settings are handled. 

If settings conflict, Zoom will use the following priority:

  1. Settings deployed and locked through ZDM.
  2. Settings deployed through GPO with zConfig (mandatory). 
    1. Settings deployed in HKEY_CURRENT_USER.
    2. Settings deployed in HKEY_LOCAL_MACHINE.
  3. Setting deployed through MSI with zConfig (mandatory).
  4. Settings deployed with the Restrict in-meeting features for users joining meetings setting.
  5. Client setting selected by the user.
  6. Settings deployed and unlocked through ZDM.
  7. Setting deployed through GPO with zRecommend.
    1. Settings deployed in HKEY_CURRENT_USER.
    2. Settings deployed in HKEY_LOCAL_MACHINE.
  8. Setting deployed through MSI with zRecommend.
  9. Web setting that are not locked.

Note: Zoom highly recommends fully testing a configuration before deployment, to ensure it achieves the desired results. 

How to deploy and configure the Zoom desktop client

Command-line deployment options

The following options are configured as part of the main command-line deployment of the desktop client. A basic install configuration is provided below, and each option afterwards is bolded in each corresponding example.

For other common installation options, please refer to the Microsoft article for MSI installations.

Note: Registry entries for the following settings will be located in the following locations:

MSI optionDescriptionDeployment exampleValue type
Basic InstallStandard command-line install examplemsiexec /package ZoomInstallerFull.msi /lex zoommsi.log-
Silent installInstalls the client without user interaction, any install windows, or immediate restartmsiexec /i ZoomInstallerFull.msi /quiet /qn /norestart /log install.log-
Wait until the in-progress meeting is over before installingDisables interaction of the package with the Restart Manager, prevents an immediate restart, and hides all UI of the process.msiexec /i ZoomInstallerFull.msi /qn /norestart MSIRestartManagerControl=DisableBoolean
zNoDesktopShortCutPrevent the creation of a desktop shortcut on install or update.msiexec /package ZoomInstallerFull.msi /lex zoommsi.log zNoDesktopShortCut=TrueBoolean
zSilentStart

Automatically start client in the system tray after reboot.

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log zSilentStart=1Boolean
zSSOHostDisabled by default, this option allows you to preconfigure the SSO URL.msiexec /package ZoomInstallerFull.msi /lex zoommsi.log zSSOHost="vanity_URL"String
ZoomAutoUpdate

Disabled by default, this will remove the Check for Updates option in the client and thus not allow users to check for and install updates for the Zoom client. If Auto-update is enabled, users will be able to check for updates in the client and will not require elevated admin rights to update.
Please refer to AutoUpdate note for important details.

msiexec /package ZoomInstallerFull. msi /lex zoommsi.log ZoomAutoUpdate=1

Boolean

DisableAdvancedSharingService

Disabled by default, this option can disable installing the CPT service, which can prevent prompting the UAC during the update process. When enabled, the client cannot use the Enable the remote control of all applications setting without a UAC prompt and the UAC prompts will appear during the update process.

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log DisableAdvancedSharingService=1

Boolean

FirewallPortStart
FirewallPortEnd

Set the inbound and outbound firewall rules for the Zoom client. Note: FirewallPortStart and FirewallPortEnd need to be configured together, as Zoom does not recommend enabling one without enabling the other.

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log FirewallPortStart="7200" FirewallPortEnd="17210"

String

AllowDowngrade

By default, MSI installations* will not allow a lower version to be installed over the existing installation. This option allows this restriction to be bypassed. 
*Note: This only applies to MSI installs. 

msiexec /i ZoomInstallerFull.msi AllowDowngrade=1

Boolean

note icon

Important notes regarding AutoUpdate

The EnableSilentAutoUpdate or AlwaysCheckLatestVersion options are no longer supported. 

Managing Auto Update on versions between 5.8.6 and 5.10.1 should be done with the ZoomAutoUpdate and SetUpdatingChannel option below. This allows for automatic download and installation of updates, based on Slow and Fast release cadences, to best suit your needs. 

For versions 5.10.3 and higher, refer to the Enterprise Auto Update policies

Additional Configuration Options

The following options must be included and configured within one of the following parameters:

Multiple options can be configured in either, with each option and its corresponding value being separated from the next by a semicolon (;).

If you want to force certain settings, but allow users to change other settings you’ve set as default, use both zConfig and zRecommend. For example, this install configuration 

disables the Google login method entirely on the client, while Auto-adjust audio is defaulted to “auto”, but can be disabled and manually set by the user.

Note: If a setting has been set in both zConfig and zRecommend, zConfig will take priority and lock the setting, which cannot be changed by the user. Refer to the Priority of Settings section to understand how other conflicting settings are resolved.

 
MSI optionDescriptionDefault state and valueValue type
Install and update
AutoStartAfterRebootAutomatically start Zoom when Windows starts. 
Note: Once deployed, the desktop client must be started manually once, before this policy will take effect on subsequent reboots. 
Disabled, 0Boolean
Min2TrayMinimize Zoom to system tray when window is closed.
Note: Once deployed, the desktop client must be started manually once, before this policy will take effect on subsequent reboots.
Enabled, 1Boolean
SetUpdatingChannelControl the cadence of updates applied to the desktop client on versions between 5.8.6 and 5.10.1:
Slow (0): fewer updates and better stability.
Fast (1): newest features and updates.
Please see AutoUpdate note for important details.
Slow (0)Boolean
DisableUpdateTo64BitControl if the desktop client can upgrade to the 64-bit version upon update, if the 32-bit version is installed on a 64-bit system.Disabled, 0Boolean
SetEnrollToken4CloudMDM, tokenEnroll your device into Zoom Device Management with a token provided from the web portal.Disabled, (empty)String
DisableZoomIfNotZDMManagedDisables Zoom app functionality if enrollment into Zoom Device Management fails, preventing use of the app without admin-deployed settings and restrictions. Disable, 0    Boolean
kCmdParam_InstallOption

The following options can be enabled and must be entered as the combined numeric value of all the options you want enabled as the string value:

1 -  Turn off video when joining a meeting.
2 - Automatically connect with computer audio. 
4 - Enable dual-monitor mode. 

8 - Default login to SSO. 

16 - Automatically enter full-screen when viewing shared content. 

32 - Automatically fit to window when viewing shared content.
64 - Enable HD video. 

128 - Allow remote control of all applications. 

For example, to enable Automatically connect with computer audio (2) and HD video (64), set this option as "kCmdParam_InstallOption=66".

Disabled, (empty)String
AddFWExceptionDisable UAC prompt when logging into Zoom. Enabled, 1Boolean
InstallVDIAutoUpdatePlugin

When a VDI environment is detected, the ZoomPluginAutoUpdateService.dll is installed so that VDI auto-update is available for use.

Enabled, 1Boolean
DisableZoomOnboarding

Disables the onboarding experience displayed the first time the Zoom desktop client is installed.

(0) - Allow onboarding experience. 

(1) - Disable onboarding experience. 

Disabled, 0Boolean
DisableDiscoverWhatsNew

Disables the What's New window, which highlights new features and enhancements for the desktop client version currently installed.

Disabled, 0Boolean
Network
EnableDiagnostic
Controls the ability for the desktop client to access the Network Connectivity Tool, which allows a user to test their network connection with Zoom services.Enabled, 1Boolean
BlockUntrustedSSLCertBlock connections to untrusted SSL certificates. Enabled, 1Boolean
SetNoRevocationCheckUrlsAllow specific URLs to be trusted and bypass the untrusted certificate prompt if the certificate is revoked. Multiple domains should be separated by ";", for example "hooli.com;hooli.org".Disabled, (empty)String
DisableCertPinDisable Certificate Pinning. Disabled, 0Boolean
ProxyPac, your_pac_urlSet proxy server for desktop client with PAC URL. Disabled, (empty)String
UseBackupPacForDetectFailPolicySet to have the app use the last available PAC, if retrieving a newer PAC fails.  Disabled, 0Boolean
ProxyServer, proxy_addressSet a proxy server for desktop client as named proxy.
Example: server: port
Disabled, (empty)String
ProxyBypass, bypass_ruleSet proxy bypass rule for the desktop client. Each value should be separated by a ; Disabled, (empty)String
PreproxyDetectPolicy
Controls the use of an admin-defined proxy pre-detection method, which can be faster for some PAC cases. If this option is not defined, the default Zoom proxy detection is used.
Note: This option affects only Windows devices. 
Disabled, (empty)String
DisableAudioOverProxyPrevent audio traffic over proxies. Disabled, 0Boolean
DisableVideoOverProxyPrevent video traffic over proxies.Disabled, 0Boolean
DisableSharingOverProxyPrevent screen sharing traffic over proxies.Disabled, 0Boolean
BandwidthLimitUp, amountSet maximum sending bandwidth for the desktop client. 
Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.
Disabled, (empty)
String (all values in Kbps)
BandwidthLimitDown, amountSet maximum receiving bandwidth for the desktop client.
Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.
Disabled, (empty)
String (all values in Kbps)
IgnoreBandwidthLimitsIgnore bandwidth limit set on web settings. (Useful for exceptions to bandwidth restrictions)Disabled, 0Boolean
EnableIndependentDataPortIf enabled, the client will use the following ports for media transmission:
Audio: 8803
Screen share: 8802
Video: 8801
Disabled, 0Boolean
ShareSessionDisableUDPSend screen share traffic over TCP, instead of UDP.Disabled, 0Boolean
DisableDirectConnection2WebDisable all direct connections to Zoom web service.Disabled, 0Boolean
DisableP2PStunTrafficDisable P2P STUN traffic from the Zoom app. This traffic is the Zoom app checking if admin web settings allow for P2P meetings on the network.Disabled, 0Boolean
EnableWinExtendProtectedAuth
Enable to Support Windows Extended Protection with NTLM authentication. Disabled, 0Boolean
Authentication
DisableMultipleAccountsSwitchDisable the ability for users to be signed-in to multiple accounts and easily switch between them. If disabled, users must manually sign out and then sign in to another account. Disabled, 0Boolean
NoFacebookRemove Facebook login option.Disabled, 0Boolean
NoGoogleRemove Google login option.Disabled, 0Boolean
EnableAppleLoginAllow access to Apple login option. Enabled, 1Boolean
NoSSORemove SSO login option.Disabled, 0Boolean
DisableLoginWithEmailRemove Email login option.Disabled, 0Boolean
DisableUserSignUp
Disable the Sign Up option on the Zoom app, which would otherwise be displayed with Join a Meeting and Sign In options upon opening the Zoom app.Disabled, 0Boolean
DisableKeepSignedInWithSSORequire fresh SSO login upon client start.Disabled, 0Boolean
DisableKeepSignedInWithGoogleRequire fresh Google login upon client start.Disabled, 0Boolean
DisableKeepSignedInWithFacebookRequire fresh Facebook login upon client start.Disabled, 0Boolean
KeepSignedInKeep the user signed in to the client when relaunched.
(Email login only)
Disabled, 0Boolean
AutoSSOLoginDefaults login to SSO. Disabled, 0Boolean
ForceSSOUrl=your_companySet and lock the default SSO URL for SSO login.
For example, hooli.zoom.us would be set as "ForceSSOUrl=hooli".
Disabled, (empty)String
EnableEmbedBrowserForSSOUse embedded browser in the client for SSO.Disabled, 0Boolean
SetWebDomain, domainSets the web domain for logging in or joining a meeting.
By default, the value is https://zoom.us or https://zoom.com.
Disabled, (empty)String
DisableAutoLaunchSSOPrevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL.Disabled, 0Boolean
EnablePhoneLoginEnables login with phone authentication. (A)Disabled, 0Boolean
EnableAlipayLoginEnables login with Alipay authentication. (A)Disabled, 0Boolean
EnablQQLoginEnables login with QQ authentication. (A)Disabled, 0Boolean
EnableWeChatLoginEnables login with WeChat authentication. (A)Disabled, 0Boolean
Account, your_account_idRestrict the client to only join meetings hosted by the specified account IDs. (B) Disabled, (empty)String
Login_Domain=domainSet the email address domain that users can login with, each separated by "&". 
Example: zoom.us & hooli.com
Disabled, (empty)String
EnableCloudSwitchEnable the option to switch between Zoom commercial (default) and Zoom for Gov.Disabled, 0Boolean
EnforceSignInToJoin

Require users to be authenticated before joining a meeting with the desktop client. Authentication can take place through the the web portal, if joining through join URL.

Note: This policy will interfere with joining meetings and webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well.

Disabled, 0Boolean
EnforceAppSignInToJoin

Require authentication on the desktop client to join any meeting on the desktop client. 

Note: This policy will interfere with joining meetings and webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well.

Disabled, 0Boolean
EnforceSignInToJoinForWebinar

Require users to be authenticated before joining a webinar with the desktop client.  Authentication can take place through the the web portal, if joining through join URL.

Note: This policy will interfere with joining webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well.

Disabled, 0Boolean
EnforceAppSignInToJoinForWebinar

Require authentication on the desktop client to join any webinar on the desktop client.

Note: This policy will interfere with joining webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well.

Disabled, 0Boolean
SetDevicePolicyToken, device_tokenRequire internal meeting authentication. (C)Disabled, (empty)String
General meeting and client options
UseDualMonitorEnable dual monitor mode.Disabled, 0Boolean
FullScreenWhenJoinWhen starting or joining a meeting, the meeting window will enter full-screen.Disabled, 0Boolean
AutoHideToolbarSet use of Always show meeting controls setting.Enabled, 0Boolean
EnableAutoCopyConfInvitationURLEnables the Copy invite link when starting a meeting option found within General app settings. Disabled, 0Boolean
UsePMIAlways use PMI for instant meetings.Disabled, 0Boolean
DefaultUsePortraitViewDefault to Portrait Mode upon opening Zoom.Disabled, 0Boolean
DisableClosedCaptioningDisable the use of all captioning.Disabled, 0Boolean
DisableManualClosedCaptioningDisable the use of manual and third-party captioning. This does not affect automated captioning. Disabled, 0Boolean
DisableAssignTypistDisable the ability for users to assign a participant the role of manually entering captions. This does not affect the use of automated captions or captions provided by a third-party service. Disabled, 0Boolean
DisableQnADisable the use of Q&A in webinars. Disabled, 0Boolean
DisableMeetingReactionsDisable the use of Meeting ReactionsDisabled, 0Boolean
DisableNonVerbalFeedbackDisable the use of Non-verbal feedbackDisabled, 0Boolean
DisableWebinarReactions
Disable the use of Webinar ReactionsDisabled, 0Boolean
DisableSideCar
Disable the use of Webinar Resources, which allows webinar hosts with the ability to link to external resources, such as newsletter sign-ups, learn more pages, and others.Disabled, 0Boolean

DisableBroadcastBOMessage

Disable the ability for the host to broadcast a message to all open breakout rooms. Disabled, 0Boolean
ConfirmWhenLeaveConfirm before leaving a meeting.Enabled, 1Boolean
ShowConnectedTimeEnable the Show Meeting Timers setting. This setting allows for viewing the current duration of the meeting, or the remaining time, based on scheduled duration. Disabled, 0Boolean
MuteWhenLockScreenAutomatically mute the microphone and turn off video, when the screen is locked during a meeting.Enabled, 1Boolean
EnableRemindMeetingTimeDisplay reminder notifications for upcoming meetings.Disabled, 0Boolean
DisableInMeetingZoomNotes
Disables the use of Zoom Notes during meetings. Disabled, 0Boolean
AI Companion

DisableSmartMeetingSummaries

Disable the in-meeting toolbar option for Meeting Summary.

If disabled, users will not be able see or interact with the AI Companion feature, but their audio will still be transcribed and available for questions by others.

Disabled, 0Boolean

DisableAICQueries

Disable the in-meeting toolbar option for AI Companion.

If disabled, users will not be able see or interact with the AI Companion feature, but their audio will still be transcribed and available for questions by others.

Disabled, 0Boolean
Video
zDisableRecvVideoDisable receiving video.Disabled, 0Boolean
zDisableSendVideoDisable sending video.Disabled, 0Boolean
DisableVideoAutomatically turn off camera when joining a meeting.Disabled, 0Boolean
Use720pByDefaultUse HD video in meetings.Disabled, 0Boolean
EnableMirrorEffectEnable mirroring of your video. Mirror effect only affects your view of your video. Enabled, 1Boolean

HideSelfView

Controls the use of the Hide Self View option. Disabled, 0Boolean
EnableFaceBeautyEnable Touch up my appearance.Disabled, 0Boolean
SetFaceBeautyValueUsed in conjunction with EnableFaceBeauty, this allows you to set the exact intensity of the Touch up my appearance filter. (Disabled), 25String
EnableLightAdaptionEnable Adjust for low-light video setting.Disabled, 0Boolean
EnableAutoLightAdaptionSet mode of adjusting low-light video feature. This is dependent on the EnableLightAdaption option.
1 - Auto
0 - Manual
Auto, 1Boolean
SetLightAdaptionManualValueUsed in conjunction with EnableLightAdaption, this allows you to set the exact intensity of the low-light adjustment. (Disabled), 20String
AlwaysShowVideoPreviewDialogAlways show the video preview when joining a meeting.Enabled, 1Boolean
HideNoVideoUser or HideNonVideoUsersHide non-video participants by default.Disabled, 0Boolean
EnableSpotlightSelfShow self as the active speaker when speaking.Disabled, 0Boolean
Enable49videoSet max number of participants displayed in Gallery View to 49 participants per screen.Disabled, 0Boolean
EnableHardwareAccForVideoSendUse hardware acceleration for video processing, when sending video.Enabled, 1Boolean
EnableHardwareAccForVideoReceiveUse hardware acceleration for video processing, when receiving video.Enabled, 1Boolean
EnableTemporalDeNoiseRemove noise from video feeds during processing.Enabled, 1Boolean
VideoRenderMethodSet the video rendering method:
0 - Auto
1 - Direct3D11 Flip Mode
2 - Direct3D11
3 - Direct3D9
4 - GDI
Auto, 0String
SetVideoRenderingPostProcessing

Adjust the use of video rendering post processing used by the desktop client.
0 - Auto
1 - Enabled
2 - Disabled

Auto, 0String
SetVideoCapturingMethodAdjust the method of video capture used by the desktop client.
0 - Auto
1 - Direct Show
2 - Media Foundation
Auto, 0String
EnableGPUComputeUtilizationUse hardware acceleration for video processing.Enabled, 1Boolean
Audio
DisableComputerAudioDisable and remove the Computer Audio from the meeting audio options.Disabled, 0Boolean
SetUseSystemDefaultMicForVoipUse the default system microphone in Windows.Disabled, 0Boolean
SetUseSystemDefaultSpeakerForVoipUse the default system speakers in Windows.Disabled, 0Boolean
SetUseSystemCommunicationMicForVOIPUse the system default communication microphone for computer audio. Disabled, 0Boolean
SetUseSystemCommunicationSpeakerForVOIPUse the system default communication speaker for computer audio.Disabled, 0Boolean
AudioAutoAdjustEnable Automatically adjust microphone volume audio setting.Enabled, 1Boolean
SetSuppressBackgroundNoiseLevel

Set level of background noise suppression:
0 - Auto
1- Low
2 - Medium
3 - High

Auto, 0String
EnableOriginalSoundEnable the Original sound for musicians audio profile for the meeting audio input.

Note
: This option is not supported within the  zRecommend parameter. 
Disabled, 0Boolean
AutoJoinVOIPAutomatically connect audio with computer audio when joining a meeting.Disabled, 0Boolean
MuteVoipWhenJoinMute computer audio microphone when joining a meeting.Disabled, 0Boolean
EnableHIDControlEnables control of USB devices by the Zoom client. This correlates to the Sync buttons on headset option within app Audio settings. Enabled, 1Boolean
SetAudioSignalProcessType

Set audio signal processing for Windows audio devices:
0 - Auto
1 - Off
2 - On

Auto, 0String
Screen sharing
DisableScreenShareDisable the ability to share your screen in meetings and webinars.
Note: This does not disable incoming screen sharing from other participants. 
Disabled, 0Boolean
NoAeroOnWin7Disable Aero mode when screen sharing on Windows 7 system.Enabled, 1Boolean
AutoFullScreenWhenViewShareWhen viewing shared content, the content window automatically goes fullscreen.Enabled, 1Boolean
AutoFitWhenViewShareWhen viewing shared content, the content window automatically adjusts to fit the viewer's screen.Enabled, 1Boolean
ShowZoomWinWhenSharingShow Zoom windows when screen sharing. Disabled, 0Boolean
EnableSplitScreenUse Side-by-Side mode when viewing shared content.Disabled, 0Boolean
zDisableAnnotationDisable and remove the ability to annotate over shared screen.Disabled, 0Boolean
EnableShareAudioEnable the Share computer audio option when sharing.Disabled, 0Boolean
EnableShareVideoEnable the Optimize for video clip option when sharing.Disabled, 0Boolean
DisableWhiteBoardDisable Classic Whiteboard feature.Disabled, 0Boolean
DisableInMeetingWhiteBoardDisable the Zoom Whiteboard feature in meetings and webinars.Disabled, 0Boolean
DisableSlideControlDisable Slide Control feature.Disabled, 0Boolean
DisableDesktopShareDisable the option to share your desktop when screen sharing.Disabled, 0Boolean
DisableRemoteControlDisable Remote Control feature. Disabled, 0Boolean
DisableRemoteSupportDisable Remote Support feature.Enabled, 1Boolean
RemoteControlAllAppAllow remote control of all applications.Disabled, 0Boolean
EnableShareClipboardWhenRemoteControlAllow clipboard access during remote control.Disabled, 0Boolean
PresentInMeetingOptionSet sharing option when sharing your screen within a meeting: 
0 - Show all sharing options
1 - Automatically share desktop
Show all sharing options, 0Boolean
EnableDoNotDisturbInSharingSilence system notifications when sharing desktop.Enabled, 1Boolean
LegacyCaptureModeDisable GPU acceleration.Disabled, 0Boolean
SetScreenCaptureModeSet the screen capture mode:
0 - Auto
1 - Legacy operating systems
2 - Share with window filtering
3 - Advanced share with window filtering
4 - Advanced share without window filtering
Auto, 0String
EnableHardwareOptimizeVideoSharingUse hardware acceleration to optimize video sharing.Enabled, 1Boolean
Zoom Phone
HidePhoneInComingCallWhileInMeetingPrevent incoming call notifications while in a meeting.Disabled, 0Boolean
EnableLaunchApp4IncomingCallsControl the Launch an external app or a URL for incoming calls option in the client.
This must be used in coordination with SetCommand4IncomingCalls, so that the URL can be configured as well.
Disabled, 0Boolean
SetCommand4IncomingCallsSet the URL used when the client receives an incoming call.
This must be used in coordination with EnableLaunchApp4IncomingCalls.
Disabled, (empty)String
ClickToCallDefault

Choose which Zoom service is used when clicking a phone number to place a call. 

0 - Zoom Phone
1 - Zoom Contact Center

Zoom Phone, 0String
In-meeting Chat
zDisableChatDisable in-meeting chat.Disabled, 0Boolean
zDisableFTDisable in-meeting file transfer. (sending or receiving)Disabled, 0Boolean
DisableMeeting3rdPartyFileStorageDisable in-meeting 3rd party file transfer.Disabled, 0Boolean
Zoom Apps
DisableZoomAppsHide the Zoom Apps button.Disabled, 0Boolean

DisableZoomAppsGuestAccess

Control the ability for users to utilize a Zoom App in Guest mode.Disabled, 0Boolean
Background and Filters
DisableVirtualBkgndDisable Virtual Background feature.Disabled, 0Boolean
DisableVideoFiltersDisable Video filters feature.Disabled, 0Boolean
EnableAutoReverseVirtualBkgndRequire post-meeting virtual background auto-reversal.Disabled, 0Boolean
Recording
RecordPath, C:/your_recording_pathSet the default recording location for local recordings.Documents folderString
zDisableCMRDisable recording to the cloud.Disabled, 0Boolean
zDisableLocalRecordDisable recording locally on the device.Disabled, 0Boolean
NotifyCMRAvailable
Control the desktop client setting Show notifications when a new recording is availableEnabled, 1Boolean
Zoom Room and Room System calling
DisableDirectShareDisable direct share with Zoom Rooms option.Disabled, 0Boolean
EnableStartMeetingWithRoomSystemDisplay the Call Room System button on the home screen of the desktop client.Disabled, 0Boolean
AppendCallerNameForRoomSystemDisplay the caller name for room systems being invited to Zoom meeting.Disabled, 0Boolean
PresentToRoomWithAudioShare sound when screen sharing to a Zoom Room.Enabled, 1Boolean
PresentToRoomOptimizeVideoOptimize screen sharing for video clip when sharing to a Zoom Room.Enabled, 1Boolean
PresentToRoomOptionSet sharing option when sharing to a Zoom Room:
0 - Show all sharing options
1 - Automatically share desktop
Automatically share desktop, 1Boolean
Zoom Chat
zDisableIMLinkPreviewDisable link previews.Disabled, 0Boolean
SetMessengerDoNotDropThreadMove messages with new replies to the bottom of the chat/channel.Enabled, 1Boolean
ShowProfilePhotosInChatControls if user profile pictures are shown in Zoom Chat.Enabled, 1Boolean
ShowVoiceMessageButtonAllow use of the Send audio message option.Enabled, 1Boolean
ShowVideoMessageButtonAllow use of the Send video message option.Enabled, 1Boolean
AlwaysShowIMNotificationBannerShow notifications for new Zoom Chat messages until dismissed.Disabled, 0Boolean
PlaySoundForIMMessagePlay audio notifications when an IM message is received.Enabled, 1Boolean
ShowIMMessagePreviewAllow message previews in system notifications when a chat message is received.Enabled, 1Boolean
MuteIMNotificationWhenInMeetingMute chat system notifications when in a meeting.Enabled, 1Boolean
Miscellaneous
EmbedUserAgentStringEmbed a specified user agent string for all HTTP requests from Zoom client.Disabled, use default user agent stringString
EmbedDeviceTagEmbed a specified device tag string for all HTTP requests from Zoom client application. This string will be appended to the head of the regular HTTP requests.Disabled, (empty)String
EnableAutoUploadDumpsAutomatically send dump files to Zoom to improve services.Disabled, 0Boolean
EnableAutoUploadMemlogsAutomatically send critical-failure-logs to Zoom to improve services.Disabled, 0Boolean
IntegrateZoomWithOutlookShow Zoom contact status in Outlook, and sets Zoom as the default chat, meeting, and phone app in Outlook.Disabled, 0Boolean
SetAccEventsOptionsSet what alerts will be read by a screen reader. The following options are available and must be entered as the combined numeric value of all the alerts you want in the string:
1 - IM chat received 
2 - Participant joined/left meeting
4 - Participant joined/left waiting room 
8 - Audio muted/unmuted by host 
16 - Video stoped by host 
32 - Screen sharing started stoped by participant 
64 - Recording permission granted revoked 
128 - Public meeting chat received 
256 -Private meeting chat received
512 - File uploaded to in-meeting chat
1024 - Closed captioning available
2048 - Closed captioning typing privilege granted/revoked
4096 - Host controls granted/revoked
8192 - Co-host controls granted/revoked 
16384 - Remote control permission granted/revoked 
32768 - Livestream started/stopped 
65536 - Participant raised/lowered hand
131072 - Q&A question received
262144 - Q&A answer received
524288 - Webinar role changed to panelist 
1048576 - Webinar role changed to attendee
All alerts will be read, (empty)String
Intercloud Policies
OverrideEnforceSigninIntercloudOverride the following policies to allow users to join a Zoom meeting or webinar hosted on the Zoom for Government Cloud (ZfG Cloud) without the need to authenticate: 
  • EnforceSignInToJoin
  • EnforceAppSignInToJoin
  • EnforceSignInToJoinForWebinar
  • EnforceAppSignInToJoinForWebinar
Disabled, 0Boolean
Intercloud_DisableAllFeaturesDisables all features except for audio and video for meetings hosted on the ZfG cloud. Disabled, 0Boolean
Intercloud_DisableMeetingChatDisables the use of in-meeting chat on meetings hosted on the ZfG Cloud.Disabled, 0Boolean
Intercloud_DisableShareScreenDisables the local ability to share screen on meetings hosted on the ZfG Cloud.
This does not affect others' ability to shared content.
Disabled, 0Boolean
Intercloud_DisableMeetingReactionsDisables the use of meeting reactions on meetings hosted on the ZfG Cloud.Disabled, 0Boolean
Intercloud_DisableMeetingFileTransferDisables the use of file transfers through in-meeting chat on meetings hosted on the ZfG Cloud.Disabled, 0Boolean
Intercloud_DisableAnnotationDisables the local ability to annotate on shared content in meetings hosted on the ZfG Cloud.
This does not affect others' ability to annotate.
Disabled, 0Boolean
Intercloud_DisableWhiteBoardDisables the use of in-meeting whiteboarding on meetings hosted on the ZfG Cloud.Disabled, 0Boolean
Intercloud_DisableLocalRecordingThis option disables the ability to locally record meetings hosted on the ZfG Cloud. Disabled, 0Boolean
Intercloud_DisableClosedCaptioningThis option disables the use of captioning features on meetings hosted on the ZfG Cloud. Disabled, 0Boolean
Intercloud_DisableRemoteControlThis option disables the remote control of shared screens in meetings hosted on the ZfG Cloud. Disabled, 0Boolean
Intercloud_DisableMeetingPollsThis option disables the use of polling in meetings hosted on the ZfG Cloud. Disabled, 0Boolean
Intercloud_DisableComputerAudioThis option disables the use of computer audio for connecting to meetings hosted on the ZfG Cloud. Disabled, 0Boolean
Zoom Mesh 
EnableMeshNetworking

Control client use of Zoom Mesh, even if deployed on your account and local network. 

Enabled, 1 Boolean

MeshMulticastIP

When utilizing Zoom Mesh, this policy allows admins to specify a valid IP address to be a UDP multicast IP for Zoom apps to declare themselves and detect each other in their local sub-network (255.255.255.0).

Admins can choose other IP addresses within the range of [224.0.0.1, 239.255.255.255].

224.0.0.1, <empty>String

MeshMulticastPort

When utilizing Zoom Mesh, this policy allows an admin to specify a valid port to be used as the UDP multicast port to communicate with other Zoom Mesh nodes on the network. Port 36699, 0String

MeshListenPortRange

When utilizing Zoom Mesh, this policy allows a valid port range to be used to set up listen sockets for connection requests between Mesh parents and children nodes. The nodes will also use this range to send signals and media data.18801-19800, <empty>String

EnableGuestMesh

When utilizing Zoom Mesh, this policy allows users to join an external Webinar as a guest through another account's local Zoom Mesh-enabled network. Other requirements must be met, such as the device having the minimum supported client version for Mesh connections and the external account's associated account setting in the web portal also enabled.Disabled, 0Boolean

Notes:

You can also configure with Microsoft command-line options.

How to deploy with Intune

  1. Sign in to the Intune Device Management dashboard.
  2. Click Apps.
  3. Under the By platform section, click Windows
  4. Click Add.
  5. For App type, select Line-of-business app, then click Select.
  6. Click Select app package file.
  7. Click Select a file, and choose the ZoomInstallFull.msi
  8. Click OK.
  9. In the App information tab enter the following:
    • Description- Enter the description of the app, i.e Zoom Meeting app.
    • Publisher- Enter Zoom Video Communications.
    • App install context- Click Device.
    • Command-line arguments- Enter any MSI installation switches as provided in sections above. 
  10. Click Next.
  11. Add any desired Scope tags.
  12. Click Next.
  13. Choose if the app is required for any specific user groups, all users, and/or all devices.
  14. Click Next.
  15. Review the deployment summary, then click Create.

Uninstall switches

To uninstall Zoom completely, please use the following Clean Zoom uninstaller (updated November 30, 2023). It is generally not necessary to use the clean uninstaller when updating to a new version of Zoom, as deploying the new version will replace the former.

The following switches are available when running the installer:

MSI optionDescription
/silentRemoves Zoom silently.
/keep_outlook_pluginRemoves Zoom, but leaves the Outlook Plugin installed.
/keep_lync_pluginRemoves Zoom, but leaves the Lync/Skype for Business Plugin installed.
/keep_notes_pluginRemoves Zoom, but leaves the Notes Plugin installed.
/vdi_clean

Removes the following Zoom VDI client and plugins:

  • VDI client 
  • Citrix Workspace, AVD, VMware Horizon, and  Universal Plugin
  • VDI Plugin Auto-Update

By default, this will also remove Outlook, Lync, and Notes plugins, but this can be prevented by using the options above to keep them in place. 

/vdi_pluginThis has the same logic as /vdi_clean, but removes the VDI plugin only. This includes:
  • VDI Plugin for Citrix Workspace, AVD, VMware Horizon, and the newer Universal Plugin (MSI)
  • VDI Plugin Auto-Update (MSI)
/vdi_clientThis has the same logic as /vdi_clean, but removes the VDI client only. This includes the both the 32-bit and 64-bit versions of the VDI client (MSI). 

Note: Use of the clean uninstaller will completely remove the Zoom client, as well as the Zoom plugin for Outlook. The Outlook add-in, Chrome/Firefox extensions, and GSuite add-on are unaffected. 

How to download the Zoom Room MSI installer

  1. Go to the Zoom Download Center
  2. Click on Download for IT Admin, and then click one of the following links under the Zoom Rooms Client section:
    1. Download MSI: Download the latest 32-bit version of the MSI installer.
    2. Download 64-bit Client: Download the latest 64-bit version of the MSI installer.

Configuration options for Zoom Rooms for Windows

The following options are configured as part of the main command-line deployment of the Zoom Rooms client. A basic deployment example is given for each item, with each option bolded in its corresponding example.

For other common installation options, please refer to the Microsoft article for MSI installations.

MSI optionDescriptionDeployment exampleValue type

Silent install

Install the client without user interaction, any install windows, or immediate restart.

msiexec /i ZoomRoomsInstaller.msi /quiet Silent=true

Boolean

EnableSSLVerificationVerify SSL certificate.msiexec /i ZoomRoomsInstaller.msi EnableSSLVerification=trueBoolean

AcceptGDPR

Automatically accept the GDPR license.

msiexec /i ZoomRoomsInstaller.msi AcceptGDPR=true

Boolean

SystemAutoLogin SystemUserName SystemPassword

Automatically login with the provided username and password.

msiexec /i ZoomRoomsInstaller.msi SystemAutoLogin=true SystemUserName="windows user name" SystemPassword="windows password"

SystemAutoLogin - Boolean UserName and Password - String

SystemOptionThe following options are available and must be entered as the combined numeric value of all the options you want enabled in the string:
1 - Automatically lock the screen
2 - Disable password upon wakeup
4 - Disable Cortana
8 - Disable notifications
16 - Disable Windows updates
32 - Enable High Performance Power
64 - Disable Hibernation
128 - Never Sleep
256 - Never Turn Off Display

For example, to disable Cortana (4) and system notifications (8), set this as "SystemOption=12".
msiexec /i ZoomRoomsInstaller.msi SystemOption=12String

Configuration options for the Outlook Plugin for Windows

The following options are configured as part of the main command-line deployment of the Zoom Outlook plugin.

For other common installation options, please refer to the Microsoft article for MSI installations.

MSI optionDescriptionDefault state and valueValue type

UsePMI

Always use PMI when scheduling meetings. 

Disabled, 0

Boolean

AutoUpdate

Allow the user to check for updates for the Outlook plugin.

Enabled, 1

Boolean

StandardUserUpdate

Allow standard user updating. This is ignored if AutoUpdate is disabled.

Disabled, 0

Boolean

Active Directory Administrative Template configuration

For a breakdown of the policies and options available for configuration, please see our list of available Group Policies and templates.