Configuration key | Description | Value type |
---|---|---|
Install and update | ||
mandatory:SetEnrollToken4CloudMDM | Enroll your device into Zoom Device Management with a token provided from the web portal. | String |
Network | ||
mandatory:choice:DisableCertPin | Disable Certificate Pinning. | Boolean |
mandatory:choice:TrustUserInstalledCert | Force the mobile app to trust a specific, locally-stored certificate, bypassing the certificate trust prompt. | Boolean |
mandatory:BandwidthLimitUp | Set maximum sending bandwidth for the desktop client. Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. | String (all values in Kbps) |
mandatory:BandwidthLimitDown | Set maximum receiving bandwidth for the desktop client. Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. | String (all values in Kbps) |
Authentication | ||
mandatory:choice:DisableMultipleAccountsSwitch | Disable the ability for users to be signed-in to multiple accounts and easily switch between them. If disabled, users must manually sign out and then sign in to another account. | Boolean |
mandatory:choice:DisableFacebookLogin | Remove Facebook login option. | Boolean |
mandatory:choice:DisableGoogleLogin | Remove Google login option. | Boolean |
mandatory:choice:DisableLoginWithSSO | Remove SSO login option. | Boolean |
mandatory:choice:DisableLoginWithEmail | Remove Email login option. | Boolean |
mandatory:choice:DisableUserSignUp | Disable the Sign Up option on the Zoom app, which would otherwise be displayed with Join a Meeting and Sign In options upon opening the Zoom app. | Boolean |
mandatory:choice:DisableKeepSignedInWithSSO | Require fresh SSO login upon client start. | Boolean |
mandatory:choice:DisableKeepSignedInWithGoogle | Require fresh Google login upon client start. | Boolean |
mandatory:choice:DisableKeepSignedInWithFacebook | Require fresh Facebook login upon client start. | Boolean |
mandatory:choice:ForceLoginWithSSO | Defaults login to SSO. | Boolean |
mandatory:SetSSOURL | Set the default SSO URL for SSO login. For example, hooli.zoom.us would be set as "SetSSOURL=hooli". | String |
mandatory:ForceSSOURL | Set and lock the default SSO URL for SSO login. For example, hooli.zoom.us would be set as "ForceSSOUrl=hooli". | String |
mandatory:choice:EnableEmbedBrowserForSSO | Use embedded browser in the client for SSO. | Boolean |
mandatory:choice:DisableAutoLaunchSSO | Prevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL. | Boolean |
mandatory:choice:EnforceLoginWithMicrosoft | Require login with Microsoft authentication. | Boolean |
mandatory:SetAccountIDsRestrictedToJoin | Restrict the client to only join meetings hosted by the specified account IDs. (A) | String |
mandatory:SetEmailDomainsRestrictedToLogin | Set the email address domain that users can login with, each separated by "&". Example: zoom.us & hooli.com | String |
mandatory:choice:EnableCloudSwitch | Enable the option to switch between Zoom commercial (default) and Zoom for Gov. | Boolean |
mandatory:choice:EnforceSignInToJoin | Require users to be authenticated before joining a meeting with the mobile app. Authentication can take place through the the web portal, if joining through join URL. Note: This policy will interfere with joining meetings and webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well. | Boolean |
mandatory:choice:EnforceAppSignInToJoin | Require authentication on the mobile app to join any meeting on the mobile app. Note: This policy will interfere with joining meetings and webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well. | Boolean |
mandatory:choice:EnforceSignInToJoinForWebinar | Require users to be authenticated before joining a webinar with the mobile app. Authentication can take place through the the web portal, if joining through join URL. Note: This policy will interfere with joining webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well. | Boolean |
mandatory:choice:EnforceAppSignInToJoinForWebinar |
Require authentication on the mobile app to join any webinar on the mobile app. Note: This policy will interfere with joining webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well. | Boolean |
mandatory:SetDevicePolicyToken | Require internal meeting authentication. (B) | String |
mandatory:SetActivationCodeToForceLogin | Uses the activation code to sign in to the Zoom app as a Common Area phone. | String |
General meeting and client options | ||
mandatory:choice:AlwaysShowMeetingControls | Set use of Always show meeting controls setting. | Boolean |
mandatory:choice:EnableAutoCopyConfInvitationURL | Enables the Auto-Copy Invite Link option found within Meeting app settings. | Boolean |
mandatory:choice:ShowConfirmDialogWhenWebJoin | Require the Zoom client to displays a join meeting prompt, when users attempt to join a meeting from a URL. | Boolean |
mandatory:choice:DisableClosedCaptioning | Disable the use of all captioning. | Boolean |
mandatory:choice:DisableAssignTypist | Disable the ability for users to assign a participant the role of manually entering captions. This does not affect the use of automated captions or captions provided by a third-party service. | Boolean |
mandatory:choice:DisableQnA | Disable the use of Q&A in webinars. | Boolean |
mandatory:choice:DisableMeetingReaction | Disable the use of Meeting reactions. | Boolean |
mandatory:choice:DisableNonVerbalFeedback | Disable the use of Non-verbal feedback. | Boolean |
mandatory:choice:DisableWebinarReactions | Disable the use of Webinar Reactions. | Boolean |
mandatory:choice:DisableSideCar | Disable the use of Webinar Resources, which allows webinar hosts with the ability to link to external resources, such as newsletter sign-ups, learn more pages, and others. | Boolean |
mandatory:choice:DisableBroadcastBOMessage | Disable the ability for the host to broadcast a message to all open breakout rooms. | Boolean |
AI Companion | ||
DisableSmartMeetingSummaries |
Disable the in-meeting toolbar option for Meeting Summary. If disabled, users will not be able see or interact with the AI Companion feature, but their audio will still be transcribed and available for questions by others. | Boolean |
DisableAICQueries |
Disable the in-meeting toolbar option for AI Companion. If disabled, users will not be able see or interact with the AI Companion feature, but their audio will still be transcribed and available for questions by others. | Boolean |
Video | ||
mandatory:choice:DisableReceiveVideo | Disable receiving video. | Boolean |
mandatory:choice:DisableVideoCamera | Disable sending video. | Boolean |
mandatory:choice:TurnOffVideoCameraOnJoin | Automatically turn off camera when joining a meeting. | Boolean |
mandatory:choice:AutoHideNoVideoUsers | Hide non-video participants by default. | Boolean |
mandatory:choice:AlwaysShowVideoPreviewDialog | Always show the video preview when joining a meeting. | Boolean |
Audio | ||
mandatory:choice:DisableComputerAudio | Disable and remove the Computer Audio from the meeting audio options. | Boolean |
Screen sharing | ||
mandatory:choice:DisableShareScreen | Disable the ability to share your screen in meetings and webinars. Note: This does not disable incoming screen sharing from other participants. | Boolean |
mandatory:choice:DisableWhiteBoard | Disable the Classic Whiteboard feature. | Boolean |
mandatory:choice:DisableInMeetingWhiteBoard | Disable the Zoom Whiteboard feature in meetings and webinars. | Boolean |
mandatory:choice:DisableDesktopShare | Disable the option to share your desktop when screen sharing. | Boolean |
In-meeting Chat | ||
mandatory:choice:DisableMeetingChat | Disable in-meeting chat. | Boolean |
Background and Filters | ||
mandatory:choice:DisableVirtualBkgnd | Disable Virtual Background feature. | Boolean |
mandatory:choice:DisableVideoFilters | Disable Video filters feature. | Boolean |
mandatory:choice:EnableAutoReverseVirtualBkgnd | Require post-meeting virtual background auto-reversal. | Boolean |
Recording | ||
mandatory:choice:DisableCloudRecording | Disable recording to the cloud. | Boolean |
Zoom Room and Room System calling | ||
mandatory:choice:DisableDirectShare | Disable direct share with Zoom Rooms option. | Boolean |
Team Chat | ||
mandatory:SetMessengerDoNotDropThread | Move messages with new replies to the bottom of the chat/channel. | Boolean |
mandatory:choice:ShowIMMessagePreview | Allow message previews in system notifications when a chat message is received. | Boolean |
mandatory:choice:MuteIMNotificationWhenInMeeting | Mute chat system notifications when in a meeting. | Boolean |
DisableIMFileTransfer | Restricts the ability of users to send files through Team Chat, except for any domains provided in the AllowedIMFileTransferDomain policy. | Boolean |
AllowedIMFileTransferDomain | Allows admins to specify domains that are allowed to send files through Team Chat when the DisableIMFileTransfer policy is enabled. Multiple domains can be separated by an &, for example: Domain1.com&Domain2.com Note: If the DisableIMFileTransfer policy is enabled and no domains are specified through this policy, file transfers through Team Chat are entirely disabled for all domains. | String |
Miscellaneous | ||
mandatory:EmbedDeviceTag | Embed a specified device tag string for all HTTP requests from Zoom client application. This string will be appended to the head of the regular HTTP requests. | String |
mandatory:choice:EnableAutoUploadDumps | Automatically send dump files to Zoom to improve services. | Boolean |
mandatory:choice:SyncMeetingToCalendar | Prevent users from syncing a newly scheduled meeting to their local calendars on their mobile device. | Boolean |
Intercloud Policies | ||
mandatory:choice:OverrideEnforceSigninIntercloud | Override the following policies to allow users to join a Zoom meeting or webinar hosted on the Zoom for Government Cloud (ZfG Cloud) without the need to authenticate:
| Boolean |
mandatory:choice:Intercloud_DisableAllFeatures | Disables all features except for audio and video for meetings hosted on the ZfG cloud. | Boolean |
mandatory:choice:Intercloud_DisableMeetingChat | Disables the use of in-meeting chat on meetings hosted on the ZfG Cloud. | Boolean |
mandatory:choice:Intercloud_DisableShareScreen | Disables the local ability to share screen on meetings hosted on the ZfG Cloud. This does not affect others' ability to shared content. | Boolean |
mandatory:choice:Intercloud_DisableMeetingReactions | Disables the use of meeting reactions on meetings hosted on the ZfG Cloud. | Boolean |
mandatory:choice:Intercloud_DisableWhiteBoard | Disables the use of in-meeting whiteboarding on meetings hosted on the ZfG Cloud. | Boolean |
mandatory:choice:Intercloud_DisableClosedCaptioning | Disabled by default, this option disables the use of captioning features on meetings hosted on the ZfG Cloud. | Boolean |
mandatory:choice:Intercloud_DisableMeetingPolls | Disabled by default, this option disables the use of polling in meetings hosted on the ZfG Cloud. | Boolean |
mandatory:choice:Intercloud_DisableComputerAudio | Disabled by default, this option disables the use of computer audio for connecting to meetings hosted on the ZfG Cloud. | Boolean |
Zoom Mesh | ||
mandatory:choice:EnableMeshNetworking |
Control client use of Zoom Mesh, even if deployed on your account and local network. | Boolean |
mandatory:choice:MeshMulticastIP |
When utilizing Zoom Mesh, this policy allows admins to specify a valid IP address to be a UDP multicast IP for Zoom apps to declare themselves and detect each other in their local sub-network (255.255.255.0). By default, 224.0.0.1 is used, but admins can choose other IP addresses within the range of [224.0.0.1, 239.255.255.255]. | String |
mandatory:choice:MeshMulticastPort |
When utilizing Zoom Mesh, this policy allows an admin to specify a valid port to be used as the UDP multicast port to communicate with other Zoom Mesh nodes on the network. The default port is 36699. | String |
mandatory:choice:MeshListenPortRange |
When utilizing Zoom Mesh, this policy allows a valid port range to be used to set up listen sockets for connection requests between Mesh parents and children nodes. The nodes will also use this range to send signals and media data. The default port range is 18801-19800. | String |
mandatory:choice:EnableGuestMesh | When utilizing Zoom Mesh, this policy allows users to join an external Webinar as a guest through another account's local Zoom Mesh-enabled network. Other requirements must be met, such as the device having the minimum supported client version for Mesh connections and the external account's associated account setting in the web portal also enabled. | Boolean |