Enabling or disabling allowed device locations for Zoom Phone hardware
The allowed device locations feature helps protect your organization's hardware phones from unauthorized use. When enabled, Zoom Phone monitors the network location of your registered desk phones and can block devices that connect from unauthorized networks. This is especially useful for preventing misuse of stolen or removed phones, since a blocked device can't register with Zoom Phone and therefore can't make or receive calls.
Note: The following device types are excluded from network location restrictions and are not affected by this feature:
- Shared devices such as analog telephone adapters (ATAs) and DECT systems
- Unassigned devices that have not been provisioned
- Devices being used with the hot desk sign-in feature
Requirements for enabling or disabling allowed device locations for Zoom Phone hardware
- A Zoom Workplace license with Zoom Phone included, or a standalone Zoom Phone calling plan
- Account owner or admin privileges
- To use the defined locations policy option, you must have network locations with IP address information already added in the Zoom web portal under Emergency Services
- Contact Zoom Support to enable the Enable location restrictions for phone hardware devices feature flag for your account.
How to enable or disable allowed device locations at the account level
Enabling this setting at the account level applies the network location policy to all supported hardware devices across your account.
- Sign in to the Zoom web portal as an admin with the privilege to edit account settings.
- In the top-right corner, click your profile picture or initials, then click Admin Center.
- In the side menu, click Settings
, then click Zoom Phone. - In the General section, click the Allowed Devices Locations toggle to enable or disable it.
If a verification dialog appears, click Enable or Disable to confirm. - Select the policy option you want to apply:
- Block devices whenever a network change is detected: The system compares each device's current IP address with its previously recorded IP address. If a change is detected, the device is automatically flagged and blocked from registering until an admin manually unblocks it.
- Block devices whenever outside an allowed location: Devices can only connect from IP addresses that match the locations you've specified. Select the network locations you want to allow from the list of locations configured in your Zoom web portal.
Note: This option requires that you've already added your network information to your locations in the Zoom web portal. Only devices connecting from the selected locations will be permitted to register.
- (Optional) To prevent site admins from changing this setting, click the lock icon
and then click Lock to confirm.
How to enable or disable allowed device locations at the site level
You can configure a separate allowed device locations policy for each site, allowing different network restrictions for different office locations.
- Sign in to the Zoom web portal as an admin with the privilege to edit sites.
- In the top-right corner, click your profile picture or initials, then click Admin Center.
- In the side menu, click Product configuration, then click Phone system, followed by Company Info.
- Click the name of the site you want to configure.
- Click the Policy tab.
- In the General section, click the Allowed Devices Locations toggle to enable or disable it.
If a verification dialog appears, click Enable or Disable to confirm.
Note: If the option is grayed out, it has been locked at the account level and must be changed there. - Select the policy option you want to apply:
- Block devices whenever a network change is detected: The system monitors IP address changes for devices at this site. If a change is detected, the device is automatically flagged and blocked until manually unblocked by an admin.
- Block devices whenever outside an allowed location: Devices assigned to this site can only register from the IP address ranges matching the locations you select. Choose the applicable locations from the list.
Note: Only locations with configured IP address information will appear in this list.
- (Optional) To prevent changes to this setting at the site level, click the lock icon
and then click Lock to confirm.
How to set a per-device exception
You can exclude individual devices from network location restrictions. This is useful for devices used by home-based workers, devices in temporary locations, or any other devices that need to connect from networks outside your standard policy.
- Sign in to the Zoom web portal as an admin with the privilege to edit phone devices.
- In the top-right corner, click your profile picture or initials, then click Admin Center.
- In the side menu, click Product configuration, then click Phone system, followed by Phones & Devices.
- Click the name of the device you want to configure.
- Click the Policy tab.
- Click the Device Blocking toggle to enable or disable it.
Note: This exception overrides any account-level or site-level policy for that individual device.
How to unblock blocked devices
When a device is flagged and blocked due to a network location policy, it can't register with Zoom Phone and can't make or receive calls until an admin manually unblocks it. You can unblock devices individually or in bulk.
Identify blocked devices
Blocked devices are indicated in the Phones & Devices list with a status icon.
- Sign in to the Zoom web portal as an admin with the privilege to edit phone devices.
- In the top-right corner, click your profile picture or initials, then click Admin Center.
- In the side menu, click Product configuration, then click Phone system, followed by Phones & Devices.
- To view only blocked devices, use the Status filter and select Blocked.
Unblock devices individually or in bulk
- Sign in to the Zoom web portal as an admin with the privilege to edit phone devices.
- In the top-right corner, click your profile picture or initials, then click Admin Center.
- In the side menu, click Product configuration, then click Phone system, followed by Phones & Devices.
- In the Phones & Devices list, filter by Blocked status to display the affected devices.
- Select the checkbox next to each device you want to unblock. To unblock all listed devices at once, select the checkbox at the top of the list.
- Click the Unblock button in the action banner.
If a verification dialog appears, click Unblock.
Note: If you export the Phones & Devices list to a CSV file while devices are blocked, a Blocked status column is included in the exported file so you have a record of which devices were affected.
How to manage alert notifications for network changes
Zoom Phone sends alert notifications to admins when devices experience a network change. For more information on alerts and notifications, see Setting up Zoom Phone alerts and notifications.
- Sign in to the Zoom web portal as an admin with the privilege to edit account settings.
- In the top-right corner, click your profile picture or initials, then click Admin Center.
- In the side menu, click Account then Alerts and notifications.
- Under the Zoom Phone tab, click Add.
- Enter the required information:
- Name: Enter an alert rule name.
- Module: Phones & Devices Management
- Rule:
- Devices are blocked: Alert persons when a device is blocked from the network.
- Devices go offline: Alert persons when a device goes offline.
- Devices go online: Alert persons when a device goes online.
- Devices have network changes: Alert persons when a device has a detected network change.
- Offline Devices Rate: Alert persons when offline devices hit a specified percentage.
- Target: Select from one of the following: Account or Site.
- Frequency: Select from one of the following: Hourly, 12 hours, or 24 hours.
- Email Recipients (Up to 10): Enter email addresses of alert recipients, separated by commas.
- (Optional) Click the Active status toggle to enable or disable the alert rule.
- Click Save to apply your changes.