Changing group settings for managed Zoom Clients

After your desktop and mobile devices have been enrolled in Zoom Device Management and device groups have been established, admins can begin managing the settings available on the managed apps.

These settings typically correlate to the policies available through MSI (Windows), GPO (Windows, macOS, Linux), Plist (macOS), and MDM deployment for Android and iOS. Any existing MSI/GPO/PLIST/MDM policies already deployed will not be affected by the ZDM enrollment, but policy changes through ZDM will supersede those applied through manual packaging and deployment.

Requirements for managing Zoom app settings through ZDM

• Enterprise account
• Account owner or admin privileges
• Zoom desktop app:
  • Windows: Global minimum version or higher
  • macOS: Global minimum version or higher
  • Linux: Global minimum version or higher
  • VDI: version 5.17.10 or higher
• Zoom mobile app:
  • Android: Global minimum version or higher
  • iOS: Global minimum version or higher
• Zoom app successfully enrolled in ZDM

How to manage group settings in ZDM

Now your devices have been enrolled in ZDM, you can start managing the settings on the Zoom client installed on these devices. To configure the policies you want to enforce for a specific group of devices:

1. Sign in to the web portal as an admin. 
2. In the navigation menu, click Device Management then Device List.
3. Switch to the Groups tab and identify the group you want to manage.
4. Click the Edit button to the right of the group. 
5. Click the Zoom Clients tab.
6. Navigate between the General, Meeting, and Chat sections to find the policies you wish to adjust. 
7. Click the toggle to enable or disable each policy.
8. If a verification dialog displays, click Enable or Disable to verify the change.
9. (Optional) Click Do not remind me again to prevent this dialog from appearing each time. 

Notes:

• The Devices tab on the Device List page provides the full list of devices managed by ZDM on your account.
• ZDM does not assign policies to users but assigns policies to devices running Zoom clients.

Available group settings for managed Zoom apps

General

• Always Use Personal Meeting ID: Windows clients will use the personal meeting ID of the user to start meetings.
• Auto Start After Reboot: Windows clients will auto start after reboot in the system tray.
• Auto Start In System Tray: Auto start Windows clients after reboot in the system tray.
• Block Untrusted SSL Cert: Windows or macOS clients will block connections to untrusted SSL certificates.
• Close To System Tray: Windows clients will minimize to the system tray and not show on the task bar when closed.
• Disable Facebook Login: Disable login with Facebook OAuth.
• Disable Google Login: Disable login with Google OAuth.
• Disable Login With SSO: Disable login with SSO.
• Disable Login With Email: Disable login with email and password.
• Force Login with Email: Force login with SSO only.
• Set AccountIDs Restricted To Join: Set account IDs that client is restricted to join meeting hosted by.
• Set Email Domains restricted To Login: Set email domains that clients is restricted to log in with.
• Set SSO URL: Set default SSO URL for client login.
• Enable Cloud Switch: Enable to switch between Zoom commercial (default) and FedRAMP cloud.
• Enable Embed Browser For SSO: Enable embed browser for SSO.
  Note: This feature is not supported in Linux desktop.
• Force SSO URL: Set and lock the default SSO URL for client login.
• Keep Signed In: Windows or macOS client will keep signed in.
• Set Web Domain: Set default web domain for Windows and macOS clients login and join meeting.
• Proxy Pac: set proxy server to Windows and macOS clients with PAC URL.
• Proxy Server: Set proxy server to client as named proxy like server:port. Windows and macOS only.
• Proxy Bypass: Set proxy by-pass rule to client. Windows and macOS only.
• Enforce Sign In to Join: Set to enforce sign in to join meetings.
• Enable Phone Login: Enable login with phone. Windows, macOS, and iOS only.
• Enable AllPlay Login: Enable login with AllPlay. Windows, macOS, and iOS only.
• Enable WeChat Login: Enable login with WeChat. Windows, macOS, and iOS only.
• Enable Apple Login (only for iOS): Enable login with Apple. iOS only.
• Default Use Portrait View: Set to use portrait view. Windows and macOS only.
• Enable Blur Snapshot: Enable to hide potentially sensitive information on the app switcher screen from Zoom. iOS only.
• Disable Cert Pin: Set to disable Cert-Pinning. iOS and Android only.
• Set Acc Events Options: Set screen reader alerts. Windows only.
• Integrate Zoom with Outlook: Windows only.
• Disable Direct Connection to Web: Disable all direct connections to Zoom web service. Windows and macOS only.
• Set Device Policy Token: Set device policy's token from web settings.
• Disable Keep Signed in With SSO:  Disable keep signed in if signing in via SSO. Windows, macOS, and Android.
• Disable Keep Signed in With Google: Disable keep signed in if signing in via Google OAuth. Windows, macOS, and Android.
• Disable Keep Signed in With Facebook: Disable keep signed in if signing in via Facebook OAuth. Windows, macOS, and Android.
• Disable Zoom Apps: Set to disable Zoom Apps feature. Windows and macOS only.
• Enforce App Sign In To Join: Set to enforce app local sign in to join Zoom meeting.
• Disable Auto Launch SSO: Disable client to launch SSO login web page automatically. 
• Disable Zoom Apps Guest Access: Disable Zoom Apps for users who are not authenticated. Windows and macOS only.
• Proxy Detect Interval: Set the proxy detect interval in seconds. Windows and macOS only.
  Note: If this policy is 0, the client will use the hardcode detect interval 30 min. Value range is 0 - 9999.

Updates

• Auto-update Zoom desktop client (Windows and Mac only): Set to automatically keep client up to date, then select one of the following:
  
  • Subscribe to the update channel, then click the down arrow to select Slow or Fast.
  • Deploy a specific version of the Zoom client, then select the client version for your Windows and/or Mac devices.
• When to download update: Set a time to download an update, then select one of the following:
  
  • Any time.
  • Only during the specified time, then select your time range to update the client in the user's time zone.
  • (Optional) Select Automatically restart the Zoom client and install updates when inactive.
  • Click Save.
• Allow users to configure auto-update for Zoom desktop client: Set to allow users to configure auto-update by going to Settings > General on the Zoom desktop client for Windows and macOS only.
• Update notifications - Zoom desktop client (Windows and Mac only): Set to show one or all of the following notifications:
  • Show a banner on the home page of the client when updates are available.
  • Prompt for updates after ending a meeting or webinar.
  • Show a notification after an update has succeeded.
• Allow users to manually check for updates: Set to allow a user to manually check for updates for Windows and macOS devices only, then select one of the following:
  
  • Update to the latest version.
  • Update to Auto Update defined version.
    Note: The version is determined according to what was specified when setting up auto-update.

Meetings

• Always Show Connected Time: Client will show meeting connected time. Windows and macOS only.
• Always Show Meeting Controls: Client will always show meeting controls. Windows, Androids, and iOS only.
• Auto Adjust Audio Setting: Client will adjust audio settings automatically. Windows and macOS only.
• Auto Enable Dual Monitor: Enable dual monitor if the system supports it. Windows and macOS only.
• Auto Hide No Video Users: Client will hide users with video turned off in gallery View.
• Auto Join VoIP: Auto connect audio with VoIP when joining meeting.
• Control All Apps When Remote Control: All applications can be controlled during remote control session.
• Disable Aero Mode During Share Screen: Disable Aero mode when screen sharing on Windows 7 system.
• Disable Annotation: Client will disable and hide the ability to annotate over shared screen.
• Disable Cloud Recording: Client will disable and hide cloud recording feature.
• Disable Local Recording: Client will disable and hide local recording feature.
• Disable Meeting Chat: Client will disable and hide in meeting chat feature.
• Disable Meeting File Transfer: Client will disable and hide the in meeting computer file-transfer feature.
• Disable Meeting third Party File Storage: Client will hide and disable the in meeting file-transfer from third-party, like Box, Dropbox.
• Disable Receive Video: Client will disable and hide ability to receive video.
• Disable Share Screen: Client will disable and hide Share Screen feature.
• Disable Video Camera: Client will disable and hide ability to send video.
• Enable HD Video: Client will capture and send camera video in HD 720p format.
• Enter Full Screen When Join Meeting: Client will automatically enter full screen mode when joining a meeting.
• Enter Full Screen When Viewing Shared Screen: Client will enter full screen mode when viewing shared screen.
• Fit Content When Viewing Shared Screen: Client will resize content to fit the window when viewing shared screen.
• Mute Voip When Join Meeting: Client will mute VoIP when joining a meeting.
• Prompt Confirm When Leave Meeting
• Client will prompt confirmation when leaving a meeting
• Recording File Path: Set path for local meeting recording files.
• Turn Off Video Camera On Join: Turn off video camera when joining meeting.
• Enable Mirror Effect: Client will enable mirror effect of your video camera.
• Enable HID Control: Client will enable HID audio device control.
• Disable Computer Audio: Client will disable computer audio.
• Enable Split Screen: Client will enable side-by-side mode.
• Show Confirm Dialog When Web Join: Client will notify an user when auto-join a meeting from website.
• Disable Remote Control: During screen sharing, the person who is sharing won't allow others to control the shared content.
• Disable Remote Support: Disallow meeting host to provide 1:1 remote support to another participant. This option depends on breakout room settings.
• Always Show Video Preview Dialog: Always show video preview dialog when joining a video meeting.
• Disable Virtual Background: Disable virtual background.
• Enable Face Beauty: Enable touch up my appearance.
• Disable White Board: Disable white board feature.
• Enable Share Audio: Enable share audio feature.
• Enable Share Video: Enable share video feature.
• Disable Direct Share: Disable to share with Zoom Rooms.
• Disable Desktop Share: Disable share desktop feature.
• Disable Audio Over Proxy: Disable audio media stream over proxy server.
• Disable Video Over Proxy: Disable video media stream over proxy server.
• Disable Sharing Over Proxy: Disable screen sharing media stream over proxy server.
• Set Use System Default Mic For VOIP: Set to use the system default microphone for VoIP.
• Set Use System Default Speaker For VOIP: Set to use the system default speaker for VoIP.
• Set Use System Communication Mic For VOIP: Set to use the system default communication microphone for VoIP.
• Set Use System Communication Speaker For VOIP: Set to use the system default communication speaker for VoIP.
• Band width Limit Up: Set bandwidth limit up value, like "800" unit Kbps; if it's lower than 800Kbps, the value will be 800Kbps.
• Band width Limit Down: Set bandwidth limit down value, like "800" unit Kbps; if it's lower than 800Kbps, the value will be 800Kbps.
• Enable Independent Data Port: Set to enable independent media data port.
• Legacy Capture Mode: Set to disable GPU acceleration.
• Enable Start Meeting With Room System: Set to show "Call Room System" button on home panel.
• Show Zoom Win When Sharing: Set to show Zoom windows during screen sharing.
• Mute When Lock Screen: Set to mute audio and stop video after locking the machine.
• Enable Elevate For Adv DSCP: Set to enable elevating to support advanced DSCP marks.
• Enable Temporal De Noise: Set to enable de-noise.
• Enable GPU Compute Utilization: Set to enable hardware acceleration for video processing.
• Enable Hardware Acc For Video Send: Set to enable hardware acceleration for sending video.
• Enable Hardware Acc For Video Receive: Set to enable hardware acceleration for receiving video.
• Share Session Disable UDP: Set to use TCP connection for screen sharing.
• Enable Spotlight Self: Set to enable spotlight my video when I speak.
• Enable 49 Video: Set to enable display up to 49 participants per screen in gallery view.
• Enable Remind Meeting Time: Set to enable reminding me before upcoming meetings.
• Video Render Method: Set specified video rendering method.
• Present To Room Optimize Video: Client will optimize screen sharing for video clip when user shares directly to a Zoom Room.
• Present To Room Option: Set specified sharing option when user shares directly to a Zoom Room.
• Present In Meeting Option: Set specified sharing option when user shares screen in a meeting.
• Disable Video Filters: Set to disable virtual filters.
• Set Screen Capture Mode: Set the specified screen capture mode.
• Enable Do Not Disturb In Sharing: Set to silence system notifications when sharing desktop.
• Set Suppress Background Noise Level: Set a level for suppressing background noise.
• Set Audio Signal Process Type: Set to enable "signal processing by windows audio device drivers" for windows.
• Enable Share Clipboard When Remote Control: Set to enable share clipboard when user is screen sharing by default.
• Hide Phone In Coming Call While In Meeting: Set to hide incoming calls while in a Zoom meeting.
• Ignore Band width Limits: Set to ignore bandwidth limits.
• Present To Room With Audio: Set to play audio during sharing to Zoom Rooms.
• Append Caller Name For Room System: Set to append caller name for Room system.
• Disable Closed Captioning: Set to disable Closed Captioning.
• Disable QnA: Set to disable QnA in the webinar.
• Disable Slide Control: Set to disable slide control during a presention.
• Disable Manual Captions: Allow host to type closed captions or assign a participant/3rd-party service to add closed captions.
• Disable Meeting Reactions: Set to disable meeting reactions.
• Disable Non Verbal Feedback: Set to disable non-verbal feedback.
• Enable Hardware Optimize Video Sharing: Use hardware acceleration to optimize video sharing.
• Adjust for Low Light: Enable adjust for Low Light.
• Auto adjust for Low Light: Enable auto adjust for Low Light.
• Disable broadcast message to BOR: Disable broadcast messages to breakout room.
• Disable in-meeting whiteboard: Set to disable in-meeting whiteboard.
• Hide Self View: Set to hide self view in the meeting.
• Enable notification when a new recording is available: Show notification when a new recording is available.

Chat

• Disable Link Preview In Chat: Client will disable and hide link preview feature in chat.
• Set Messenger Drop Thread: Set to move messages with new replies to the bottom of the chat.
• Show Audio Message Button: Set to show audio message button.
• Always Show IM Notification Banner: Set to show notification banner on screen until dismissed.
• Play Sound For IM Message: Set to play sound when receive a new message.
• Show IM Message Preview: Set to show message preview.
• Mute IM Notification When In Meeting: Set to mute chat notifications while in a meeting or internal call.
• Show video message button: Show video message button in chat.
• Preferred Language: Use this language when translating messages.
• Receive Notifications By Keyword: Set keywords as the basis for triggering message notifications.
• Unread View Order: Where to start when viewing unread messages in a channel (two options: a) Start at the first unread, b) Start at the latest unread).
• Keep Unread Messages On Top: Keep all unread messages at the top of recent chats. Android and iOS only. 
• Show Unread Count For Channel: Set to show unread message count (1) for channels.
• Show Unread Count For Meeting Chat: Set to show unread message count (1) for meeting chats.
• Message Notification Preference: Setting up message notifications preferences for Team Chat (three options: a) All messages, b) Direct messages, mentions, and replies, c) Off).

VDI-specific ZDM policies

These policies are supported for the VDI clients managed through ZDM (version 5.17.10 or higher) and correspond to existing VDI-specific registry settings. Slight differences of when the policies are applied are also detailed below. 

Refer to the VDI registry settings article for more details on each setting. 

The following policies will take effect within 6 hours (if already a user is signed-in) or immediately upon a fresh sign-in: 

• DisableScreenshotOptimization
• ServiceUnavailableTipMsg
• FallbackModeTipMessage
• ForceWallView3x3
• DoTComplianceMode
• EnableShareAudioSound
• EnableOptimizeForVideo
• DisableWallView7x7
• EnableDifferentVersionTip
• MinPluginVersion

These policies will only take effect upon a fresh sign-in: 

• EnableVDIPluginAutoUpgrade
• PingServerFromThinClient