Using Exchange 2013 and above with Zoom Rooms


When a calendar resource is integrated with a Zoom Room, the room’s TV display, controller, and Scheduling Display show the meetings scheduled for the room. Members of your organization can schedule a meeting in a Zoom Room by inviting the room to the meeting. Conference rooms are assigned as a calendar resource through a calendar service. Authorizing Zoom to have access to calendar resources enables users to start and join meetings in the room using one touch.

Before you can add a calendar service for Zoom Rooms, an Exchange administrator must do the following:

After the Exchange administrator completes these steps, you use the credentials of the dedicated user to provide authorization for the Zoom Rooms in your account to use the calendar service and all of its calendar resources.

This article covers:

Prerequisites for using Exchange 2013 and above with Zoom Rooms

Note: Your network, including firewalls and proxies, must allow traffic to outlook.office365.com.

How to create a service account and room email

Creating a Zoom Rooms service account

  1. Sign in to your Exchange Admin Center as an admin.
  2. Click Mailboxes under Recipients Click +.
  3. Click User mailbox.
  4. Create an email address, for example, room@company.com.
  5. This same user email will be used by all of your Zoom Rooms.
  6. Make a note of the User login name and password.
  7. Create the same work email and add it under your account in the Zoom Room's Calendar section.

Creating or obtaining the room and room email

  1. Sign in to your Exchange Admin Center as an admin.
  2. Click Resources, then Recipients.
  3. (Optional) Click on the plus + icon if you need to add a room.
  4. Make a note of the display names of your rooms and corresponding email addresses.

How to link the service account with room resources

Delegating access to the service account

  1. Sign in to your Exchange Admin Center as an admin.
  2. Click Resources, then Recipients.
  3. Double click the first room.
  4. Click mailbox delegation.

  5. Scroll down to Full Access and click +.
  6. Select the dedicated email and click add->.

Sharing the resource with the service account

  1. Sign in to Outlook web with your Exchange admin account. 
    Note: If Outlook Web has not been enabled for your Exchange server, the calendar can be shared through the Outlook application.
  2. Under My account, click Open another mailbox.
  3. Enter the room resource's email address, and select the room. 
  4. Click Open, to open the mailbox for the room resource.
  5. This will open the Zoom Room resource mailbox. Click on the calendar in the bottom left-hand corner of your navigation.
  6. Right-click the room's main calendar under Your Calendars and then click Share calendar.
  7. In the next window, enter the service account's Work Email, and select Editor access.
  8. Click Send.
  9. Sign in to the service account's mailbox.
  10. Click on the invitation from the Zoom Room resource and click Accept.
  11. Accepting the invite will open the calendar tab. You should see the Zoom Room resource calendar listed on the left side of the page under Other Calendars. Ensure this calendar is accounted for.

How to enable Basic Authentication or NTLM Authentication

Zoom Rooms supports Basic and NTLM forms of authentication for on-premise solutions such as Exchange server. Please use one of the following to enable either of which applies to your account.

Basic Authentication

  1. In EWC click on Authentication.
  2. Check the basic authentication check box and click Save.

NTLM Authentication

  1. Open the Exchange Management Shell on an Exchange 2013 server.
  2. To enable Kerberos authentication for Outlook Anywhere clients, run the following command on your Client Access server: 
    Get-OutlookAnywhere -server CAS-1 | Set-OutlookAnywhere -InternalClientAuthenticationMethod  Negotiate
  3. To enable Kerberos authentication for MAPI over HTTP clients, run the following command from your Exchange 2013 Client Access server: 
    Get-MapiVirtualDirectory -Server CAS-1 | Set-MapiVirtualDirectory -IISAuthenticationMethods Ntlm, Negotiate

How to configure resource attributes

Retrieving EWS URL

  1. In the Exchange Admin Center, click servers.
  2. Click Virtual Directories, then double-click EWS.

  3. Click General, and locate the EWS URL.

Disable Removal of Subject from Room Events

  1. Start Windows PowerShell using the Run as administrator option.
  2. Enter the following command to input your Exchange admin username and password. 
    $UserCredential = Get-Credential
  3. Prepare the session (use EWS URL from the previous section). 
    $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://server-porter.portertest.com/powershell -Authentication Kerberos -Credential $UserCredential
  4. Connect the PowerShell session.
    Import-PSSession $Session
  5. You can check the settings for room before and after changing with following command:
    Get-CalendarProcessing -Identity "49ers" | Format-List identity,deletesubject,addorganizertosubject,DeleteComments,RemovePrivateProperty
  6. Verify DeleteSubject, AddOrganizerToSubject, DeleteComments and RemovePrivateProperty are set to false. 
    Identity              : portertest.com/Users/room_name
    DeleteSubject         : False
    AddOrganizerToSubject : False
    DeleteComments        : False
    RemovePrivateProperty : False
    Note: If you see an error such: as “Import-PSSession : Files cannot be loaded because running scripts is disabled on this system. Provide a valid certificate with which to sign the files.”, please use the following command first (this command will fail if you didn't run PowerShell as an administrator in step 1): 
    Set-ExecutionPolicy Unrestricted
  7. Modify the attributes for your room's calendar:
    Set-CalendarProcessing "room_name" -AddOrganizerToSubject $false -OrganizerInfo $true -DeleteAttachments $true -DeleteComments $false -DeleteSubject $false -RemovePrivateProperty $false
    Note: If you see errors such as
    • “The operation couldn't be performed because object [room name] couldn't be found on [exchange server].”, this means the scope of the cmdlet does not include the user/room.
    • If you see an error such as “Set-CalendarProcessing command not found”, please make sure the user you are logged in with via PowerShell has permissions in Organization Management and Recipient Management.
  8. Disconnect session, and then close PowerShell. 
    Remove-PSSession $Session 

How to add the calendar service to Zoom

To add the Exchange calendar service to your Zoom account:

  1. Sign in to the Zoom web portal as a Zoom Rooms administrator.
  2. Choose Calendar Integration, and then click Add Calendar Service.
    The Add a Calendar Service dialog displays.
  3. Click Exchange.
  4. Enter the Exchange details:
    • Exchange login username or UPN: Enter your exchange credentials as user logon domain\user logon name, as set in Active Directory. For exchange, if your email address is johnsmith@mycompany.com, you can enter it as mycompany\johnsmith. 
    • Exchange login password: Enter your Exchange password.
    • Exchange Version: Select your Exchange version from the dropdown.
    • EWS URL: Enter the URL for the EWS Server. Be sure to include the entire URL, including the https:// portion.
    • Account Permission Type: Choose Full Access Delegate if you've followed the configuration above. 
  5. Click Authorize.
    The Calendar Integration page shows the calendar service that you added.


    See Add a Zoom Room for information on configuring a calendar resource with a Zoom Room.