Mass-deploying with Group Policy Objects

 

The Zoom desktop client can be deployed and configured in bulk for Windows by using the the MSI installer. Administrators can disable features such as screen sharing or video sharing for all meetings that a user joins, regardless of who is hosting the meeting. By installing with an Active Directory Administrative Template or registry keys, administrators can lock certain features and settings upon deployment of the desktop client. 

Active Directory admins can configure Zoom settings and features through Group Policy at any time. Zoom does not need to be installed on the computer for these settings to be configured. Zoom can be downloaded at a later time and the configuration will apply the first time Zoom is launched. The settings apply whether the standard installer is used or the MSI installer is used. To ensure compatibility with the policies listed below, we recommend updating to the latest version of the desktop client or Zoom Rooms client.

The Zoom desktop application, as well as the Zoom Rooms application, can also be deployed and configured via command-line or Intune as well. 

The desktop client can be enrolled in and managed through Zoom Device Management, which allows you to centrally control desktop client and mobile app settings in the Zoom web portal. 

note icon
While the VDI host installer is an MSI file-type and can use the same switches as the standard client MSI installer, except for the AutoUpdate switch, there are some registry policies that are specific to the VDI client. Learn more about VDI-specific mass deployment options.

Learn to install Zoom with preconfigured settings for Windows devices, macOS devices, Android devices, and iOS devices. You can also use Zoom’s own Device Management platform to centrally configure desktop client and mobile app settings.

This article covers:

Prerequisites for configuring with GPO

Note: Some of the switches listed below require the latest version of the Zoom installer.

Available templates

Note: For VDI, please go here

The following downloads contain the administrative templates, as well as registry files for specific versions of Zoom:

Windows desktop client 
Standard client

Policies for version 5.10.3

Policies for version 5.10.6

Policies for version 5.11.0

Policies for version 5.11.3

Policies for version 5.11.3

Policies for version 5.12.0

Policies for version 5.13.0

Policies for version 5.13.5

Policies for version 5.13.10

Policies for version 5.14.5

Policies for version 5.14.10

Policies for version 5.15.3

Policies for version 5.16.0

Policies for version 5.16.10

Policies for version 5.17.0

Policies for version 5.17.5

Policies for version 5.17.10

Policies for version 6.0.0

Policies for version 6.1.0

Policies for version 6.2.0

Note: Each download includes .ADM and .ADMX files. If using the .ADM files, the policies will be located under Classic Administrative Templates.

Active Directory Administrative Template Configuration

  1. Login to your Active Directory server as an admin.
  2. Click Start, choose Administrative Tools, then Active Directory Users and Computers.
  3. Expand the domain where you would like to set the group policy.
  4. Right-click on the domain where you would like to set the group policy, click Properties, then Group Policy.
  5. Create a Group Policy Object and name it Zoom.
  6. Select the newly created Group Policy Object and click Edit.
  7. Under the Computer Configuration, right click on Administrative Templates.
  8. Choose Add/Remove Templates.
  9. Browse and find the Administrative Template downloaded from this article. Click Open.
  10. Close the Add/Remove Templates window.
  11. Under Computer Configuration then Administrative Templates, you should now have the option for Zoom.
  12. Double click on the Zoom folder to open a list of subfolders: General Settings, Chat Settings, and Meeting Settings.
  13. Double click on one of the subfolders to view settings and double click on the individual setting to view more information and enable or disable it.

Configuration options for the desktop client

The following Registry options can be found under one of the following locations:

The table below indicates which specific location (General, Meetings, and Chat) each option is located.

Note: The order and groupings in this table are not indicative of the actual order and groups of the registry options, but provided in this order to aid reading, finding, and use of the numerous options available.

note icon

Important notes regarding AutoUpdate

The EnableSilentAutoUpdate, AlwaysCheckLatestVersion, ZoomAutoUpdate, and SetUpdatingChannel options are no longer supported. 

Admins wanting to configure automatic download and installation of Zoom updates, based on Zoom's Slow and Fast release cadences or their own custom auto-update track, can refer to the Enterprise Auto Update policies.

 
Registry ItemDescriptionDefault state and valueValue typeSpecific Registry location
Install and update
AutoStartAfterRebootAutomatically start client after reboot.
Note: Once deployed, the desktop client must be started manually once, before this policy will take effect on subsequent reboots. 
Disabled, 0BooleanGeneral
AutoStartInSystemTrayAutomatically start client in the system tray after reboot.
Note: Once deployed, the desktop client must be started manually once, before this policy will take effect on subsequent reboots. 
Disabled, 0BooleanGeneral
CloseToSystemTrayMinimize Zoom to system tray when window is closed.Enabled, 1BooleanGeneral
DisableCreatingDesktopShortcutPrevent the creation of a desktop shortcut on install or update.Disabled, 0BooleanGeneral
DisableUpdateTo64BitControl if the desktop client can upgrade to the 64-bit version upon update, if the 32-bit version is installed on a 64-bit system.Disabled, 0BooleanGeneral
SetEnrollToken4CloudMDMEnroll your device into Zoom Device Management with a token provided from the web portal.Disabled, (empty)StringGeneral
DisableZoomIfNotZDMManagedDisables Zoom app functionality if enrollment into Zoom Device Management fails, preventing use of the app without admin-deployed settings and restrictions. Disable, 0BooleanGeneral
DisableZoomOnboarding

Disables the onboarding experience displayed the first time the Zoom desktop client is installed.

(0) - Allow onboarding experience. 

(1) - Disable onboarding experience. 

Disabled, 0BooleanGeneral
DisableDiscoverWhatsNew

Disables the What's New window, which highlights new features and enhancements for the desktop client version currently installed.

Disabled, 0BooleanGeneral
Network
EnableDiagnostic
Controls the ability for the desktop client to access the Network Connectivity Tool, which allows a user to test their network connection with Zoom services.Enabled, 1BooleanMeeting
EnableDumpTPStatInfoControls the ability for the Network Connectivity Tool on the desktop client to create a local log file of QoS statistics that can be used for custom per meeting analytics and reporting.Disabled, 0BooleanMeeting
BlockUntrustedSSLCertBlock connections to untrusted SSL certificates. Enabled, 1BooleanGeneral
SetNoRevocationCheckUrlsAllow specific URLs to be trusted and bypass the untrusted certificate prompt if the certificate is revoked. Multiple domains should be separated by ";", for example "hooli.com;hooli.org".Disabled, (empty)StringGeneral
DisableCertPinDisable Certificate Pinning.Disabled, 0BooleanGeneral
ProxyPACSet proxy server for desktop client with PAC URL. Disabled, (empty)StringGeneral
UseBackupPacForDetectFailPolicySet to have the app use the last available PAC, if retrieving a newer PAC fails.  Disabled, 0BooleanGeneral
ProxyServerSet a proxy server for desktop client as named proxy.
Example: server: port
Disabled, (empty)StringGeneral
ProxyBypassSet proxy bypass rule for the desktop client. Disabled, (empty)StringGeneral
PreproxyDetectPolicy
Controls the use of an admin-defined proxy pre-detection method, which can be faster for some PAC cases. If this option is not defined, the default Zoom proxy detection is used.
Note: This option affects only Windows devices. 
Disabled, (empty)StringGeneral
DisableAudioOverProxyPrevent audio traffic over proxies. Disabled, 0BooleanMeetings
DisableVideoOverProxyPrevent video traffic over proxies.Disabled, 0BooleanMeetings
DisableSharingOverProxyPrevent screen sharing traffic over proxies.Disabled, 0BooleanMeetings
BandwidthLimitUpSet maximum sending bandwidth for the desktop client. 
Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.
Disabled, (empty)String (all values in Kbps)Meetings
BandwidthLimitDownSet maximum receiving bandwidth for the desktop client.
Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.
Disabled, (empty)String (all values in Kbps)Meetings
IgnoreBandwidthLimitsIgnore bandwidth limit set on web settings. (Useful for exceptions to bandwidth restrictions)Disabled, 0BooleanGeneral
EnableIndependentDataPortIf enabled, the client will use the following ports for media transmission:
Audio: 8803
Screen share: 8802
Video: 8801
Disabled, 0BooleanMeetings
ShareSessionDisableUDPSend screen share traffic over TCP, instead of UDP.Disabled, 0BooleanGeneral
DisableDirectConnection2WebDisable all direct connections to Zoom web service.Disabled, 0BooleanGeneral
DisableP2PStunTrafficDisable P2P STUN traffic from the Zoom app. This traffic is the Zoom app checking if admin web settings allow for P2P meetings on the network.Disabled, 0BooleanGeneral
DisableDirectConnectionPKWill disable the direct connection PK request by the Zoom clientDisabled, 0BooleanGeneral
EnableWinExtendProtectedAuth
Enable to Support Windows Extended Protection with NTLM authentication. (Windows client only)Disabled, 0BooleanGeneral
Authentication
DisableMultipleAccountsSwitchDisable the ability for users to be signed-in to multiple accounts and easily switch between them. If disabled, users must manually sign out and then sign in to another account. Disabled, 0BooleanGeneral
DisableFacebookLoginRemove Facebook login option.Disabled, 0BooleanGeneral
DisableGoogleLoginRemove Google login option.Disabled, 0BooleanGeneral
EnableAppleLoginAllow access to Apple login option. Enabled, 1BooleanGeneral
DisableLoginWithSSORemove SSO login option.Disabled, 0BooleanGeneral
DisableLoginWithEmailRemove Email login option.Disabled, 0BooleanGeneral
DisableUserSignUp
Disable the Sign Up option on the Zoom app, which would otherwise be displayed with Join a Meeting and Sign In options upon opening the Zoom app.Disabled, 0BooleanGeneral
DisableKeepSignedInWithSSORequire fresh SSO login upon client start.Disabled, 0BooleanGeneral
DisableKeepSignedInWithGoogleRequire fresh Google login upon client start.Disabled, 0BooleanGeneral
DisableKeepSignedInWithFacebookRequire fresh Facebook login upon client start.Disabled, 0BooleanGeneral
KeepSignedInKeep the user signed in to the client when relaunched.
(Email login only)
Disabled, 0BooleanGeneral
ForceLoginWithSSODefaults login to SSO. Disabled, 0BooleanGeneral
SetSSOURLSet the default SSO URL for SSO login.
For example, hooli.zoom.us would be set as "SetSSOURL=hooli".
Disabled, (empty)StringGeneral
ForceSSOURLSet and lock the default SSO URL for SSO login.
For example, hooli.zoom.us would be set as "ForceSSOUrl=hooli".
Disabled, (empty)StringGeneral
EnableEmbedBrowserForSSOUse embedded browser in the client for SSO.Disabled, 0BooleanGeneral
SetWebDomainSets the web domain for logging in or joining a meeting.
By default, the value is https://zoom.us or https://zoom.com.
Disabled, (empty)StringGeneral
DisableAutoLaunchSSOPrevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL.Disabled, 0BooleanGeneral
EnablePhoneLoginEnables login with phone authentication. (A)Disabled, 0BooleanGeneral
EnableAlipayLoginEnables login with Alipay authentication. (A)Disabled, 0BooleanGeneral
EnableQQLoginEnables login with QQ authentication. (A)Disabled, 0BooleanGeneral
EnableWeChatLoginEnables login with WeChat authentication. (A)Disabled, 0BooleanGeneral
SetAccountIDsRestrictedToJoinRestrict the client to only join meetings hosted by the specified account IDs. (B) Disabled, (empty)StringGeneral
SetEmailDomainsRestrictedToLoginSet the email address domain that users can login with, each separated by "&". 
Example: zoom.us & hooli.com
Disabled, (empty)StringGeneral
EnableCloudSwitchEnable the option to switch between Zoom commercial (default) and Zoom for Gov.Disabled, 0BooleanGeneral
EnforceSignInToJoinRequire users to be authenticated before joining a meeting with the desktop client. Authentication can take place through the the web portal, if joining through join URL.

Note: This policy will interfere with joining meetings and webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well.
Disabled, 0BooleanGeneral
EnforceAppSignInToJoinRequire authentication on the desktop client to join any meeting on the desktop client. 

Note: This policy will interfere with joining meetings and webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well.
Disabled, 0BooleanGeneral
EnforceSignInToJoinForWebinarRequire users to be authenticated before joining a webinar with the desktop client.  Authentication can take place through the the web portal, if joining through join URL.

Note: This policy will interfere with joining webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well.
Disabled, 0BooleanGeneral
EnforceAppSignInToJoinForWebinar

Require authentication on the desktop client to join any webinar on the desktop client.

Note: This policy will interfere with joining webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well.

Disabled, 0BooleanGeneral
SetDevicePolicyTokenRequire internal meeting authentication. (C)Disabled, (empty)StringGeneral
General meeting and client options
AutoEnableDualMonitorEnable dual monitor mode.Disabled, 0BooleanMeetings
EnterFullScreenWhenJoinMeetingWhen starting or joining a meeting, the meeting window will enter full-screen.Disabled, 0BooleanMeetings
AlwaysShowMeetingControlsSet use of Always show meeting controls setting.Disabled, 0BooleanMeetings
EnableAutoCopyConfInvitationURLEnables the Copy invite link when starting a meeting option found within General app settings. Disabled, 0BooleanMeetings
AlwaysUsePersonalMeetingIDAlways use PMI for instant meetings.Disabled, 0BooleanGeneral
DefaultUsePortraitViewDefault to Portrait Mode upon opening Zoom.Disabled, 0BooleanGeneral
ShowConfirmDialogWhenWebJoinRequire the Zoom client to displays a join meeting prompt, when users attempt to join a meeting from a URL.Disabled, 0BooleanMeetings
DisableClosedCaptioningDisable the use of all captioning.Disabled, 0BooleanMeetings
DisableManualClosedCaptioningDisable the use of manual and third-party captioning. This does not affect automated captioning. Disabled, 0BooleanMeetings
DisableAssignTypistDisable the ability for users to assign a participant the role of manually entering captions. This does not affect the use of automated captions or captions provided by a third-party service. Disabled, 0BooleanMeetings
DisableQnADisable the use of Q&A in webinars. Disabled, 0BooleanMeetings
DisableMeetingReactionsDisable the use of Meeting reactionsDisabled, 0BooleanMeetings
DisableNonVerbalFeedbackDisable the use of Non-verbal feedbackDisabled, 0BooleanMeetings
DisableWebinarReactions
Disable the use of Webinar ReactionsDisabled, 0BooleanMeetings
DisableSideCar
Disable the use of Webinar Resources, which allows webinar hosts with the ability to link to external resources, such as newsletter sign-ups, learn more pages, and others.Disabled, 0BooleanMeetings

DisableBroadcastBOMessage

Disable the ability for the host to broadcast a message to all open breakout rooms. Disabled, 0BooleanMeetings
PromptConfirmWhenLeaveMeetingConfirm before leaving a meeting.Enabled, 1BooleanMeetings
AlwaysShowConnectedTimeEnable the Show Meeting Timers setting. This setting allows for viewing the current duration of the meeting, or the remaining time, based on scheduled duration. Disabled, 0BooleanMeetings
MuteWhenLockScreenAutomatically mute the microphone and turn off video, when the screen is locked during a meeting.Enabled, 1BooleanMeetings
EnableRemindMeetingTimeDisplay reminder notifications for upcoming meetings.Disabled, 0BooleanMeetings
DisableInMeetingZoomNotes
Disables the use of Zoom Notes during meetings. Disabled, 0BooleanMeetings
AI Companion

DisableSmartMeetingSummaries

Disable the in-meeting toolbar option for Meeting Summary.

If disabled, users will not be able see or interact with the AI Companion feature, but their audio will still be transcribed and available for questions by others.

Disabled, 0BooleanMeetings

DisableAICQueries

Disable the in-meeting toolbar option for AI Companion.

If disabled, users will not be able see or interact with the AI Companion feature, but their audio will still be transcribed and available for questions by others.

Disabled, 0BooleanMeetings
Video
DisableReceiveVideoDisable receiving video.Disabled, 0BooleanMeetings
DisableVideoCameraDisable sending video.Disabled, 0BooleanMeetings
TurnOffVideoCameraOnJoinAutomatically turn off camera when joining a meeting.Disabled, 0BooleanMeetings
EnableHDVideoUse HD video in meetings.Disabled, 0BooleanMeetings
EnableMirrorEffectEnable mirroring of your video. Mirror effect only affects your view of your video. Enabled, 1BooleanMeetings

HideSelfView

Controls the use of the Hide Self View option. Disabled, 0BooleanMeetings
EnableFaceBeautyEnable Touch up my appearance.Disabled, 0BooleanMeetings
SetFaceBeautyValueUsed in conjunction with EnableFaceBeauty, this allows you to set the exact intensity of the Touch up my appearance filter. (Disabled), 25StringMeetings
EnableLightAdaptionEnable Adjust for low-light video setting.Disabled, 0BooleanMeetings
EnableAutoLightAdaptionSet mode of adjusting low-light video feature. This is dependent on the EnableLightAdaption option.
1 - Auto
0 - Manual
Auto, 1BooleanMeetings
SetLightAdaptionManualValueUsed in conjunction with EnableLightAdaption, this allows you to set the exact intensity of the low-light adjustment. (Disabled), 20StringMeetings
AlwaysShowVideoPreviewDialogAlways show the video preview when joining a meeting.Disabled, 0BooleanMeetings
AutoHideNoVideoUsersHide non-video participants by default.Disabled, 0BooleanMeetings
EnableSpotlightSelfShow self as the active speaker when speaking.Disabled, 0BooleanMeetings
Enable49videoSet max number of participants displayed in Gallery View to 49 participants per screen.Disabled, 0BooleanMeetings
EnableHardwareAccForVideoSendUse hardware acceleration for video processing, when sending video.Enabled, 1BooleanGeneral
EnableHardwareAccForVideoReceiveUse hardware acceleration for video processing, when receiving video.Enabled, 1BooleanGeneral
EnableTemporalDeNoiseEnables de-noising of videoEnabled, 1BooleanGeneral
VideoRenderMethodSet the video rendering method:
0 - Auto
1 - Direct3D11 Flip Mode
2 - Direct3D11
3 - Direct3D9
4 - GDI
Auto, 0StringMeetings
SetVideoRenderingPostProcessing

Adjust the use of video rendering post processing used by the desktop client on Windows.
0 - Auto
1 - Enabled
2 - Disabled

Auto, 0StringMeetings
SetVideoCapturingMethodAdjust the method of video capture used by the desktop client on Windows.
0 - Auto
1 - Direct Show
2 - Media Foundation
Auto, 0StringMeetings
EnableGPUComputeUtilizationUse hardware acceleration for video processing.Enabled, 1BooleanGeneral
Audio
DisableComputerAudioDisable and remove the Computer Audio from the meeting audio options.Disabled, 0BooleanMeetings
SetUseSystemDefaultMicForVOIPUse the default system microphone in Windows.Disabled, 0BooleanMeetings
SetUseSystemDefaultSpeakerForVOIPUse the default system speakers in Windows.Disabled, 0BooleanMeetings
SetUseSystemCommunicationMicForVOIPUse the system default communication microphone for computer audio. Disabled, 0BooleanMeetings
SetUseSystemCommunicationSpeakerForVOIPUse the system default communication speaker for computer audio.Disabled, 0BooleanMeetings
AutoAdjustAudioSettingsEnable Automatically adjust microphone volume audio setting.Enabled, 1BooleanMeetings
SetSuppressBackgroundNoiseLevelSet level of background noise suppression:
0 - Auto
1- Low
2 - Medium
3 - High
Auto, 0StringMeetings
EnableOriginalSoundEnable the Original sound for musicians audio profile for the meeting audio input.Enabled, 1BooleanMeetings
AutoJoinVoIPAutomatically connect audio with computer audio when joining a meeting.Disabled, 0BooleanMeetings
MuteVoIPWhenJoinMeetingMute computer audio microphone when joining a meeting.Disabled, 0BooleanMeetings
EnableHIDControlEnables control of USB devices by the Zoom client. This correlates to the Sync buttons on headset option within app Audio settings. Enabled, 1BooleanMeetings
SetAudioSignalProcessTypeSet audio signal processing for Windows audio devices:
0 - Auto
1 - Off
2 - On
Auto, 0StringMeetings
Screen sharing
DisableShareScreenDisable the ability to share your screen in meetings and webinars.
Note: This does not disable incoming screen sharing from other participants. 
Disabled, 0BooleanMeetings
DisableAeroModeDuringShareScreenDisable Aero mode when screen sharing on Windows 7 system.Enabled, 1BooleanMeetings
EnterFullScreenWhenViewingSharedScreenWhen viewing shared content, the content window automatically goes fullscreen.Enabled, 1BooleanMeetings
FitContentWhenViewingSharedScreenWhen viewing shared content, the content window automatically adjusts to fit the viewer's screen.Enabled, 1BooleanMeetings
ShowZoomWinWhenSharingShow Zoom windows when screen sharing.Disabled, 0BooleanMeetings
EnableSplitScreenUse Side-by-Side mode when viewing shared content.Disabled, 0BooleanMeetings
DisableAnnotationDisable and remove the ability to annotate over shared screen.Disabled, 0BooleanMeetings
EnableShareAudioEnable the Share computer audio option when sharing.Disabled, 0BooleanMeetings
EnableShareVideoEnable the Optimize for video clip option when sharing.Disabled, 0BooleanMeetings
DisableWhiteBoardDisable Classic Whiteboard feature.Disabled, 0BooleanMeetings
DisableInMeetingWhiteBoardDisable the Zoom Whiteboard feature in meetings and webinars.Disabled, 0BooleanMeetings
DisableSlideControlDisable Slide Control feature.Disabled, 0BooleanMeetings
DisableDesktopShareDisable the option to share your desktop when screen sharing.Disabled, 0BooleanMeetings
DisableRemoteControlDisable Remote Control feature. Disabled, 0BooleanMeetings
DisableRemoteSupportDisable Remote Support feature.Enabled, 1BooleanMeetings
ControlAllAppsWhenRemoteControlAllow remote control of all applications.Disabled, 0BooleanMeetings
EnableShareClipboardWhenRemoteControlAllow clipboard access during remote control.Disabled, 0BooleanMeetings
PresentInMeetingOptionSet sharing option when sharing your screen within a meeting: 
0 - Show all sharing options
1 - Automatically share desktop
Show all sharing options, 0BooleanMeetings
EnableDoNotDisturbInSharingSilence system notifications when sharing desktop.Enabled, 1BooleanMeetings
LegacyCaptureModeDisable GPU acceleration.Disabled, 0BooleanMeetings
ScreenCaptureModeSet the screen capture mode:
0 - Auto
1 - Legacy operating systems
2 - Share with window filtering
3 - Advanced share with window filtering
4 - Advanced share without window filtering
Auto, 0StringMeetings
EnableHardwareOptimizeVideoSharingUse hardware acceleration to optimize video sharing.Enabled, 1BooleanMeetings
Zoom Phone
HidePhoneInComingCallWhileInMeetingPrevent incoming call notifications while in a meeting.Disabled, 0BooleanMeetings
EnableLaunchApp4IncomingCallsControl the Launch an external app or a URL for incoming calls option in the client.
This must be used in coordination with SetCommand4IncomingCalls, so that the URL can be configured as well.
Disabled, 0BooleanMeetings
SetCommand4IncomingCallsSet the URL used when the client receives an incoming call.
This must be used in coordination with EnableLaunchApp4IncomingCalls.
Disabled, (empty)StringMeetings
ClickToCallDefault

Choose which Zoom service is used when clicking a phone number to place a call. 

0 - Zoom Phone
1 - Zoom Contact Center

Zoom Phone, 0StringMeetings
In-meeting Chat
DisableMeetingChatDisable in-meeting chat.Disabled, 0BooleanMeetings
DisableMeetingFileTransferDisable in-meeting file transfer. (sending or receiving)Disabled, 0BooleanMeetings
DisableMeeting3rdPartyFileStorageDisable in-meeting 3rd party file transfer.Disabled, 0BooleanMeetings
Zoom Apps
DisableZoomAppsHide the Zoom Apps button.Disabled, 0BooleanGeneral

DisableZoomAppsGuestAccess

Control the ability for users to utilize a Zoom App in Guest mode.Disabled, 0BooleanGeneral
Background and Filters
DisableVirtualBkgndDisable Virtual Background feature.Disabled, 0BooleanMeetings
DisableVideoFiltersDisable Video filters feature.Disabled, 0BooleanMeetings
EnableAutoReverseVirtualBkgndRequire post-meeting virtual background auto-reversal.Disabled, 0BooleanMeetings
Recording
RecordingFilePathSet the default recording location for local recordings.
Note: Windows System Variables, such as %appdata% or %username%, are supported as of 5.13.0. 
User\DocumentStringMeetings
DisableCloudRecordingDisable recording to the cloud.Disabled, 0BooleanMeetings
DisableLocalRecordingDisable recording locally on the device.Disabled, 0BooleanMeetings
NotifyCMRAvailable
Control the desktop client setting Show notifications when a new recording is availableEnabled, 1BooleanMeetings
Zoom Room and Room System calling
DisableDirectShareDisable direct share with Zoom Rooms option.Disabled, 0BooleanMeetings
EnableStartMeetingWithRoomSystemDisplay the Call Room System button on the home screen of the desktop client.Disabled, 0BooleanMeetings
AppendCallerNameForRoomSystemDisplay the caller name for room systems being invited to Zoom meeting.Disabled, 0BooleanMeetings
PresentToRoomWithAudioShare sound when screen sharing to a Zoom Room.Enabled, 1BooleanMeetings
PresentToRoomOptimizeVideoOptimize screen sharing for video clip when sharing to a Zoom Room.Enabled, 1BooleanMeetings
PresentToRoomOptionSet sharing option when sharing to a Zoom Room:
0 - Show all sharing options
1 - Automatically share desktop
Automatically share desktop, 1BooleanMeetings
Team Chat
KeepOnlyOneSectionOpenInChatControls the state of the Only allow one section opened at a time setting for the desktop app, found under the Team Chat section of app settings.Disabled, 0BooleanChat
SeparateIMChatAndChannelControls the state of the Organize by section setting for the desktop app, found under the Team Chat section of app settings.Disabled, 0BooleanChat
DisableLinkPreviewInChatDisable link previews.Disabled, 0BooleanChat
SetMessengerDoNotDropThreadMove messages with new replies to the bottom of the chat/channel.Enabled, 1BooleanChat
ShowProfilePhotosInChatControls if user profile pictures are shown in Zoom Chat.Enabled, 1BooleanChat
ShowVoiceMessageButtonAllow use of the Send audio message option.Enabled, 1BooleanChat
ShowVideoMessageButtonAllow use of the Send video message option.Enabled, 1BooleanChat
AlwaysShowIMNotificationBannerShow notifications for new Zoom Chat messages until dismissed.Disabled, 0BooleanChat
PlaySoundForIMMessagePlay audio notifications when an IM message is received.Enabled, 1BooleanChat
ShowIMMessagePreviewAllow message previews in system notifications when a chat message is received.Enabled, 1BooleanChat
MuteIMNotificationWhenInMeetingMute chat system notifications when in a meeting.Enabled, 1BooleanChat
DisableIMFileTransferRestricts the ability of users to send files through Team Chat, except for any domains provided in the AllowedIMFileTransferDomain policy. Disabled, 0BooleanChat
AllowedIMFileTransferDomainAllows admins to specify domains that are allowed to send files through Team Chat when the DisableIMFileTransfer policy is enabled. Multiple domains can be separated by an &, for example: Domain1.com&Domain2.com

Note: If the DisableIMFileTransfer policy is enabled and no domains are specified through this policy, file transfers through Team Chat are entirely disabled for all domains. 
Disabled, (empty)StringChat
Miscellaneous
EmbedUserAgentStringEmbed a specified user agent string for all HTTP requests from Zoom client.Disabled, use default user agent stringStringGeneral
EmbedDeviceTagEmbed a specified device tag string for all HTTP requests from Zoom client application. This string will be appended to the head of the regular HTTP requests.Disabled, (empty)StringGeneral
EnableAutoUploadDumpsAutomatically send dump files to Zoom to improve services.Disabled, 0BooleanGeneral
EnableAutoUploadMemlogsAutomatically send critical-failure-logs to Zoom to improve services.Disabled, 0BooleanGeneral
Disable3rdModuleVerifyDisables the check of the signature of the third-party library.Disabled, 0BooleanGeneral
IntegrateZoomWithOutlookShow Zoom contact status in Outlook, and sets Zoom as the default chat, meeting, and phone app in Outlook.Disabled, 0BooleanGeneral
SetAccEventsOptionsSet what alerts will be read by a screen reader. The following options are available and must be entered as the combined numeric value of all the alerts you want in the string:
1 - IM chat received 
2 - Participant joined/left meeting
4 - Participant joined/left waiting room 
8 - Audio muted/unmuted by host 
16 - Video stoped by host 
32 - Screen sharing started stoped by participant 
64 - Recording permission granted revoked 
128 - Public meeting chat received 
256 -Private meeting chat received
512 - File uploaded to in-meeting chat
1024 - Closed captioning available
2048 - Closed captioning typing privilege granted/revoked
4096 - Host controls granted/revoked
8192 - Co-host controls granted/revoked 
16384 - Remote control permission granted/revoked 
32768 - Livestream started/stopped 
65536 - Participant raised/lowered hand
131072 - Q&A question received
262144 - Q&A answer received
524288 - Webinar role changed to panelist 
1048576 - Webinar role changed to attendee
No Value (all alerts will be read)String 
Intercloud Policies
OverrideEnforceSigninIntercloudOverride the following policies to allow users to join a Zoom meeting or webinar hosted on the Zoom for Government Cloud (ZfG Cloud) without the need to authenticate: 
  • EnforceSignInToJoin
  • EnforceAppSignInToJoin
  • EnforceSignInToJoinForWebinar
  • EnforceAppSignInToJoinForWebinar
Disabled, 0Boolean

Meetings

Intercloud_DisableAllFeatures

Disables all features except for audio and video for meetings hosted on the ZfG cloud. Disabled, 0BooleanMeetings

Intercloud_DisableMeetingChat

Disables the use of in-meeting chat on meetings hosted on the ZfG Cloud.Disabled, 0BooleanMeetings

Intercloud_DisableShareScreen

Disables the local ability to share screen on meetings hosted on the ZfG Cloud.
This does not affect others' ability to shared content.
Disabled, 0BooleanMeetings

Intercloud_DisableMeetingReactions

Disables the use of meeting reactions on meetings hosted on the ZfG Cloud.Disabled, 0BooleanMeetings

Intercloud_DisableMeetingFileTransfer

Disables the use of file transfers through in-meeting chat on meetings hosted on the ZfG Cloud.Disabled, 0BooleanMeetings

Intercloud_DisableAnnotation

Disables the local ability to annotate on shared content in meetings hosted on the ZfG Cloud.
This does not affect others' ability to annotate.
Disabled, 0BooleanMeetings
Intercloud_DisableWhiteBoardDisables the use of in-meeting whiteboarding on meetings hosted on the ZfG Cloud.Disabled, 0BooleanMeetings
Intercloud_DisableLocalRecordingDisabled by default, this option disables the ability to locally record meetings hosted on the ZfG Cloud. Disabled, 0BooleanMeetings
Intercloud_DisableClosedCaptioningDisabled by default, this option disables the use of captioning features on meetings hosted on the ZfG Cloud. Disabled, 0BooleanMeetings
Intercloud_DisableRemoteControlDisabled by default, this option disables the remote control of shared screens in meetings hosted on the ZfG Cloud. Disabled, 0BooleanMeetings

Intercloud_DisableMeetingPolls

Disabled by default, this option disables the use of polling in meetings hosted on the ZfG Cloud. Disabled, 0BooleanMeetings

Intercloud_DisableComputerAudio

Disabled by default, this option disables the use of computer audio for connecting to meetings hosted on the ZfG Cloud. Disabled, 0BooleanMeetings
Zoom Mesh  
EnableMeshNetworking

Control client use of Zoom Mesh, even if deployed on your account and local network. 

Enabled, 1 BooleanMeetings

MeshMulticastIP

When utilizing Zoom Mesh, this policy allows admins to specify a valid IP address to be a UDP multicast IP for Zoom apps to declare themselves and detect each other in their local sub-network (255.255.255.0).

Admins can choose other IP addresses within the range of [224.0.0.1, 239.255.255.255].

224.0.0.1, <empty>StringMeetings

MeshMulticastPort

When utilizing Zoom Mesh, this policy allows an admin to specify a valid port to be used as the UDP multicast port to communicate with other Zoom Mesh nodes on the network. Port 36699, 0StringMeetings

MeshListenPortRange

When utilizing Zoom Mesh, this policy allows a valid port range to be used to set up listen sockets for connection requests between Mesh parents and children nodes. The nodes will also use this range to send signals and media data.18801-19800, <empty>StringMeetings

EnableGuestMesh

When utilizing Zoom Mesh, this policy allows users to join an external Webinar as a guest through another account's local Zoom Mesh-enabled network. Other requirements must be met, such as the device having the minimum supported client version for Mesh connections and the external account's associated account setting in the web portal also enabled.Disabled, 0BooleanMeetings

Notes:

Configuration options for Zoom Rooms

The following Registry option can be found under:  HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Rooms\General

Registry ItemDescriptionDefault state and value

EnableSSLVerification

The client will verify the server certificateDisabled, 0