Mass-deploying with preconfigured settings for Android

System administrators can use a Mobile Device Management (MDM) to remotely configure the Zoom mobile app on managed Android devices. This allows admins to require use of certain settings or disable them entirely.

The mobile app can be enrolled in and managed through Zoom Device Management, which allows you to centrally control desktop client and mobile app settings in the Zoom web portal. 

This article covers:

Learn to install Zoom with preconfigured settings for Windows devices, macOS devices, and iOS devices. You can also use Zoom’s own Device Management platform to centrally configure desktop client and mobile app settings.

Prerequisites for using MDM to configure Zoom on Android

Configuration options

Configuration keyDescriptionValue type
Install and update
mandatory:SetEnrollToken4CloudMDMEnroll your device into Zoom Device Management with a token provided from the web portal.String
Network
mandatory:choice:DisableCertPinDisable Certificate Pinning.Boolean
mandatory:choice:TrustUserInstalledCertForce the mobile app to trust a specific, locally-stored certificate, bypassing the certificate trust prompt.Boolean
mandatory:BandwidthLimitUpSet maximum sending bandwidth for the desktop client. 
Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.		String
(all values in Kbps)
mandatory:BandwidthLimitDownSet maximum receiving bandwidth for the desktop client.
Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.		String
(all values in Kbps)
Authentication
mandatory:choice:DisableMultipleAccountsSwitchDisable the ability for users to be signed-in to multiple accounts and easily switch between them. If disabled, users must manually sign out and then sign in to another account. Boolean
mandatory:choice:DisableFacebookLoginRemove Facebook login option.Boolean
mandatory:choice:DisableGoogleLoginRemove Google login option.Boolean
mandatory:choice:DisableLoginWithSSORemove SSO login option.Boolean
mandatory:choice:DisableLoginWithEmailRemove Email login option.Boolean
mandatory:choice:DisableUserSignUp
Disable the Sign Up option on the Zoom app, which would otherwise be displayed with Join a Meeting and Sign In options upon opening the Zoom app.Boolean
mandatory:choice:DisableKeepSignedInWithSSORequire fresh SSO login upon client start.Boolean
mandatory:choice:DisableKeepSignedInWithGoogleRequire fresh Google login upon client start.Boolean
mandatory:choice:DisableKeepSignedInWithFacebookRequire fresh Facebook login upon client start.Boolean
mandatory:choice:ForceLoginWithSSODefaults login to SSO.Boolean
mandatory:SetSSOURLSet the default SSO URL for SSO login.
For example, hooli.zoom.us would be set as "SetSSOURL=hooli".		String
mandatory:ForceSSOURLSet and lock the default SSO URL for SSO login.
For example, hooli.zoom.us would be set as "ForceSSOUrl=hooli".		String
mandatory:choice:EnableEmbedBrowserForSSOUse embedded browser in the client for SSO.Boolean
mandatory:choice:DisableAutoLaunchSSOPrevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL.Boolean
mandatory:choice:EnforceLoginWithMicrosoftRequire login with Microsoft authentication.Boolean
mandatory:SetAccountIDsRestrictedToJoinRestrict the client to only join meetings hosted by the specified account IDs. (A)String
mandatory:SetEmailDomainsRestrictedToLoginSet the email address domain that users can login with, each separated by "&". 
Example: zoom.us & hooli.com		String
mandatory:choice:EnableCloudSwitchEnable the option to switch between Zoom commercial (default) and Zoom for Gov.Boolean
mandatory:choice:EnforceSignInToJoinRequire users to be authenticated before joining a meeting with the mobile app. Authentication can take place through the the web portal, if joining through join URL.

Note: This policy will interfere with joining meetings and webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well.		Boolean
mandatory:choice:EnforceAppSignInToJoinRequire authentication on the mobile app to join any meeting on the mobile app. 

Note: This policy will interfere with joining meetings and webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well.		Boolean
mandatory:choice:EnforceSignInToJoinForWebinarRequire users to be authenticated before joining a webinar with the mobile app.  Authentication can take place through the the web portal, if joining through join URL.

Note: This policy will interfere with joining webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well.		Boolean
mandatory:choice:EnforceAppSignInToJoinForWebinar

Require authentication on the mobile app to join any webinar on the mobile app.

Note: This policy will interfere with joining webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well.

Boolean
mandatory:SetDevicePolicyTokenRequire internal meeting authentication. (B)String
mandatory:SetActivationCodeToForceLoginUses the activation code to sign in to the Zoom app as a Common Area phone. String
General meeting and client options
mandatory:choice:AlwaysShowMeetingControlsSet use of Always show meeting controls setting.Boolean
mandatory:choice:EnableAutoCopyConfInvitationURLEnables the Auto-Copy Invite Link option found within Meeting app settings. Boolean
mandatory:choice:ShowConfirmDialogWhenWebJoinRequire the Zoom client to displays a join meeting prompt, when users attempt to join a meeting from a URL.Boolean
mandatory:choice:DisableClosedCaptioningDisable the use of all captioning.Boolean
mandatory:choice:DisableAssignTypistDisable the ability for users to assign a participant the role of manually entering captions. This does not affect the use of automated captions or captions provided by a third-party service. Boolean
mandatory:choice:DisableQnADisable the use of Q&A in webinars.Boolean
mandatory:choice:DisableMeetingReactionDisable the use of Meeting reactions.Boolean
mandatory:choice:DisableNonVerbalFeedbackDisable the use of Non-verbal feedback.Boolean

mandatory:choice:DisableWebinarReactions

Disable the use of Webinar Reactions. Boolean
mandatory:choice:DisableSideCar
Disable the use of Webinar Resources, which allows webinar hosts with the ability to link to external resources, such as newsletter sign-ups, learn more pages, and others.Boolean

mandatory:choice:DisableBroadcastBOMessage

Disable the ability for the host to broadcast a message to all open breakout rooms.Boolean
AI Companion

DisableSmartMeetingSummaries

Disable the in-meeting toolbar option for Meeting Summary.

If disabled, users will not be able see or interact with the AI Companion feature, but their audio will still be transcribed and available for questions by others.

Boolean

DisableAICQueries

Disable the in-meeting toolbar option for AI Companion.

If disabled, users will not be able see or interact with the AI Companion feature, but their audio will still be transcribed and available for questions by others.

Boolean
Video
mandatory:choice:DisableReceiveVideoDisable receiving video.Boolean
mandatory:choice:DisableVideoCameraDisable sending video.Boolean
mandatory:choice:TurnOffVideoCameraOnJoinAutomatically turn off camera when joining a meeting.Boolean
mandatory:choice:AutoHideNoVideoUsersHide non-video participants by default.Boolean
mandatory:choice:AlwaysShowVideoPreviewDialog Always show the video preview when joining a meeting.Boolean
Audio
mandatory:choice:DisableComputerAudioDisable and remove the Computer Audio from the meeting audio options.Boolean
Screen sharing
mandatory:choice:DisableShareScreenDisable the ability to share your screen in meetings and webinars.
Note: This does not disable incoming screen sharing from other participants. 		Boolean
mandatory:choice:DisableWhiteBoardDisable the Classic Whiteboard feature.Boolean
mandatory:choice:DisableInMeetingWhiteBoardDisable the Zoom Whiteboard feature in meetings and webinars.Boolean
mandatory:choice:DisableDesktopShareDisable the option to share your desktop when screen sharing.Boolean
In-meeting Chat
mandatory:choice:DisableMeetingChatDisable in-meeting chat.Boolean
Background and Filters
mandatory:choice:DisableVirtualBkgndDisable Virtual Background feature.Boolean
mandatory:choice:DisableVideoFiltersDisable Video filters feature.Boolean
mandatory:choice:EnableAutoReverseVirtualBkgndRequire post-meeting virtual background auto-reversal.Boolean
Recording
mandatory:choice:DisableCloudRecordingDisable recording to the cloud.Boolean
Zoom Room and Room System calling
mandatory:choice:DisableDirectShareDisable direct share with Zoom Rooms option.Boolean
Team Chat
mandatory:SetMessengerDoNotDropThreadMove messages with new replies to the bottom of the chat/channel.Boolean
mandatory:choice:ShowIMMessagePreviewAllow message previews in system notifications when a chat message is received.Boolean
mandatory:choice:MuteIMNotificationWhenInMeetingMute chat system notifications when in a meeting.Boolean
DisableIMFileTransferRestricts the ability of users to send files through Team Chat, except for any domains provided in the AllowedIMFileTransferDomain policy. Boolean
AllowedIMFileTransferDomainAllows admins to specify domains that are allowed to send files through Team Chat when the DisableIMFileTransfer policy is enabled. Multiple domains can be separated by an &, for example: Domain1.com&Domain2.com

Note: If the DisableIMFileTransfer policy is enabled and no domains are specified through this policy, file transfers through Team Chat are entirely disabled for all domains. 		String
Miscellaneous
mandatory:EmbedDeviceTagEmbed a specified device tag string for all HTTP requests from Zoom client application. This string will be appended to the head of the regular HTTP requests.String
mandatory:choice:EnableAutoUploadDumpsAutomatically send dump files to Zoom to improve services.Boolean
mandatory:choice:SyncMeetingToCalendar
Prevent users from syncing a newly scheduled meeting to their local calendars on their mobile device.Boolean
Intercloud Policies
mandatory:choice:OverrideEnforceSigninIntercloudOverride the following policies to allow users to join a Zoom meeting or webinar hosted on the Zoom for Government Cloud (ZfG Cloud) without the need to authenticate: 
  • EnforceSignInToJoin
  • EnforceAppSignInToJoin
  • EnforceSignInToJoinForWebinar
  • EnforceAppSignInToJoinForWebinar
Boolean

mandatory:choice:Intercloud_DisableAllFeatures

Disables all features except for audio and video for meetings hosted on the ZfG cloud. Boolean

mandatory:choice:Intercloud_DisableMeetingChat

Disables the use of in-meeting chat on meetings hosted on the ZfG Cloud.Boolean

mandatory:choice:Intercloud_DisableShareScreen

Disables the local ability to share screen on meetings hosted on the ZfG Cloud.
This does not affect others' ability to shared content.		Boolean

mandatory:choice:Intercloud_DisableMeetingReactions

Disables the use of meeting reactions on meetings hosted on the ZfG Cloud.Boolean
mandatory:choice:Intercloud_DisableWhiteBoardDisables the use of in-meeting whiteboarding on meetings hosted on the ZfG Cloud. Boolean
mandatory:choice:Intercloud_DisableClosedCaptioningDisabled by default, this option disables the use of captioning features on meetings hosted on the ZfG Cloud. Boolean

mandatory:choice:Intercloud_DisableMeetingPolls

Disabled by default, this option disables the use of polling in meetings hosted on the ZfG Cloud. Boolean

mandatory:choice:Intercloud_DisableComputerAudio

Disabled by default, this option disables the use of computer audio for connecting to meetings hosted on the ZfG Cloud. Boolean
Zoom Mesh
mandatory:choice:EnableMeshNetworking

Control client use of Zoom Mesh, even if deployed on your account and local network. 

Boolean

mandatory:choice:MeshMulticastIP

When utilizing Zoom Mesh, this policy allows admins to specify a valid IP address to be a UDP multicast IP for Zoom apps to declare themselves and detect each other in their local sub-network (255.255.255.0).

By default, 224.0.0.1 is used, but admins can choose other IP addresses within the range of [224.0.0.1, 239.255.255.255].

String

mandatory:choice:MeshMulticastPort

When utilizing Zoom Mesh, this policy allows an admin to specify a valid port to be used as the UDP multicast port to communicate with other Zoom Mesh nodes on the network. 

The default port is 36699.

String

mandatory:choice:MeshListenPortRange

When utilizing Zoom Mesh, this policy allows a valid port range to be used to set up listen sockets for connection requests between Mesh parents and children nodes. The nodes will also use this range to send signals and media data.

The default port range is 18801-19800.

String

mandatory:choice:EnableGuestMesh

When utilizing Zoom Mesh, this policy allows users to join an external Webinar as a guest through another account's local Zoom Mesh-enabled network. Other requirements must be met, such as the device having the minimum supported client version for Mesh connections and the external account's associated account setting in the web portal also enabled.Boolean

Notes:

How to configure Zoom with AirWatch

How to add the Zoom app with Google Play Store integration

The following instructions apply if you set up Google Play Integration with your AirWatch account. If you don't have this integration, view the AirWatch support site for more information.

  1. Open AirWatch.
  2. Click Add, then Public Application.
  3. Enter the following information:
  4. Click Next.
  5. Click the Zoom Cloud Meetings app from the Google Play Store.
  6. Click Approve and follow the on-screen prompts to add the app.

How to add the Zoom app without Google Play Store Integration

  1. Open AirWatch.
  2. Click Add, then Public Application.
  3. Enter the following information:
  4. Click Next.
  5. Enter a name to identify the Zoom app.
  6. Click Save and Assign.

How to assign the app to a group and apply a configuration

  1. Click Add Assignment.
  2. In the Assignment Groups field, select a group to apply the configuration to.
  3. Next to Application Configuration, select Enabled if you want to auto-configure certain app settings for users.
  4. Specify the configuration options as needed.
    Note: Verify that all fields are filled out, because blank fields will prevent you from adding the configuration.
  5. Click Add.
  6. Click Save and Publish to deploy the app.

How to configure Zoom with G Suite

How to add the Zoom app

  1. Sign in to the G Suite admin console.
  2. In the left panel, click App Management.
  3. Click the option to manage allowed apps.
  4. In the bottom-right corner, click the plus icon.
  5. Search for "zoom" and click the Zoom Cloud Meetings app.
  6. Click Select.

How to assign the app to a group and apply a configuration

  1. Click Zoom Cloud Meetings in the list of allowed apps.
  2. Click Create New Managed Configuration.
  3. Enter a name for the configuration and click Save.

How to configuring Zoom with Intune

How to install Intune Company Portal on users' devices

  1. Install the Intune Company Portal app on your users' phones.
  2. Instruct your users to sign in to the Company Portal app and follow the in-app instructions and allow the app to manage their devices.
  3. Instruct your users to install Zoom using the Intune Company Portal app.

How to add the Zoom for Intune app

  1. Sign in to the Intune Device Management dashboard
  2. Under By platform, click Android.
  3. Click Add.
  4. Under the App type, click the dropdown menu and select Managed Google Play app.
  5. At the bottom of that panel, click Select.
  6. Use the search bar to find and select the Zoom for Intune app.
  7. Click Select.
  8. (Optional) Fill out the other fields as needed.
  9. Click Next.
  10. Assign the app to devices or groups as needed.
  11. Click Next.
  12. Review and click Create.
  13. In the left panel, click Apps.
  14. Under the Policy section, click App configuration policies.
  15. Click Add and select Managed devices.
  16. Enter the following information:
  17. Click Next.
  18. Enter the policies and their values, either through XML upload or manual configuration.
  19. Click Next.
  20. Assign the configuration policy to the necessary users, groups, and/or devices.
  21. Click Next.
  22. Review and click Create.

Note: While not required, not deploying an associated App Protection Policy will result in users being prompted to sign in to the Intune account upon every launch of the Zoom app. Upon first launch users will need to sign in with their Microsoft credentials, but including the App Protection Policy avoids any further Intune authentication prompts.