Mass-deploying with preconfigured settings for macOS

IT Admin may choose to install Zoom with preconfigured settings on the Zoom desktop client for macOS. This installation requires configuring a .plist file and installing it along with the IT Admins Installer for macOS.

Settings can be enforced or set as just the default, which the end-user can still modify after deployment.

The desktop client can be enrolled in and managed through Zoom Device Management, which allows you to centrally control desktop client and mobile app settings in the Zoom web portal. 

This article covers:

• How to download the admin desktop client installer
• Priority of settings
• How to create and configure the .plist file
  • How to require and recommend default settings
  • Available configuration options
  • **Important notes regarding AutoUpdate
  • How to deploy Zoom

Learn to install Zoom with preconfigured settings for Windows devices, Android devices, and iOS devices. You can also use Zoom’s own Device Management platform to centrally configure desktop client and mobile app settings.

Prerequisites for using the IT admin installer

• IT Admin version of the macOS desktop client

How to download the admin desktop client installer

1. Go to the Zoom Download Center
2. Click on Download for IT Admin, and then click the Download button under Zoom Client for Meetings.

Priority of settings

Settings can be configured in multiple places. While some can only be configured by the Zoom Admin or IT Admin, some settings can be configured by the end-user as well. If settings conflict, Zoom will use the following priority:

1. Settings deployed and locked through ZDM
2. Setting deployed via us.zoom.config.plist NOT set under PackageRecommend
3. Web setting locked for the account or group
4. Client setting selected by the user
5. Settings deployed via us.zoom.config.plist set under PackageRecommend
6. Web settings that are not locked

How to create and configure the .plist file

If you want to configure options for the Zoom desktop client on macOS, you need to create a .plist file. If you don't configure the .plist file, Zoom will be deployed with the default configuration.

How to require and recommend default settings

Settings configured through plist are either enforced or set as the default, but allow users to change them within the Zoom desktop client.

• If the plist key is set under PackageRecommend key, the client will install with those settings configured, but users will be able to change those options after deployment.
• If the plist key is set outside of the PackageRecommend key, the client will install with those settings required and unable to be adjusted by users.

For example, if you want to have the Automatically enter full screen when viewing shared content enabled by default, but completely disallow Google or Facebook logins, the plist file would be:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>NoGoogle</key>
<true/>
<key>NoFacebook</key>
<true/>
<key>PackageRecommend</key>
<dict>
<key>zAutoFullScreenWhenViewShare</key>
<true/>
</dict>
</dict>
</plist>

Available configuration options

Plist key	Description	Default state and value	Value type
Install and update
zAutoUpdate	Enable updates through the client by users. When disabled, the Check for Updates button is also hidden. Please see AutoUpdate section for important details.	Disabled, 0	Boolean
EnableSilentAutoUpdate	Allow the desktop client to silently check for updates and, if user’s version is lower than the stable version set by Zoom, install upon launching the client. This option requires the AutoUpdate option to be enabled. Please see AutoUpdate section for important details.	Enabled, 1	Boolean
AlwaysCheckLatestVersion	Allow the desktop client to check for updates and, if user’s version is lower than the latest version released by Zoom, prompt the user to install the update. This option requires the AutoUpdate option to be enabled. Please see AutoUpdate section for important details.	Disabled, 0	Boolean
SetUpdatingChannel	Control the cadence of updates applied to the desktop client (version 5.6.8 or higher): Slow (0): fewer updates and better stability. Fast (1): newest features and updates. Please see AutoUpdate section for important details.	Slow, 0	Boolean
DisableDaemonInstall	Control if the desktop client can upgrade to the 64-bit version upon update, if the 32-bit version is installed on a 64-bit system.	Disabled, 0	Boolean
SetEnrollToken4CloudMDM, token	Enroll your device into Zoom Device Management with a token provided from the web portal.	Disabled, (empty)	String
Network
BlockUntrustedSSLCert	Block connections to untrusted SSL certificates.	Enabled, 1	Boolean
DisableCertPin	Disable Certificate Pinning.	Disabled, 0	Boolean
ProxyPAC, your_pac_url	Set proxy server for desktop client with PAC URL.	Disabled, (empty)	String
ProxyServer, proxy_address	Set a proxy server for desktop client as named proxy. Example: server: port	Disabled, (empty)	String
ProxyBypass, bypass_rule	Set proxy bypass rule for the desktop client.	Disabled, (empty)	String
DisableAudioOverProxy	Prevent audio traffic over proxies.	Disabled, 0	Boolean
DisableVideoOverProxy	Prevent video traffic over proxies.	Disabled, 0	Boolean
DisableSharingOverProxy	Prevent screen sharing traffic over proxies.	Disabled, 0	Boolean
BandwidthLimitUp	Set maximum sending bandwidth for the desktop client.  Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.	Disabled, (empty)	String (all values in Kbps)
BandwidthLimitDown	Set maximum receiving bandwidth for the desktop client. Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.	Disabled, (empty)	String (all values in Kbps)
IgnoreBandwidthLimits	Ignore bandwidth limit set on web settings. (Useful for exceptions to bandwidth restrictions)	Disabled, 0	Boolean
EnableIndependentDataPort	If enabled, the client will use the following ports for media transmission: Audio: 8803 Screen share: 8802 Video: 8801	Disabled, 0	Boolean
DisableDirectConnection2Web	Disable all direct connections to Zoom web service.	Disabled, 0	Boolean
Authentication
NoFacebook	Remove Facebook login option.	Disabled, 0	Boolean
NoGoogle	Remove Google login option.	Disabled, 0	Boolean
EnableAppleLogin	Allow access to Apple login option.	Enabled, 1	Boolean
NoSSO	Remove SSO login option.	Disabled, 0	Boolean
DisableLoginWithEmail	Remove Email login option.	Disabled, 0	Boolean
DisableKeepSignedInWithSSO	Require fresh SSO login upon client start.	Disabled, 0	Boolean
DisableKeepSignedInWithGoogle	Require fresh Google login upon client start.	Disabled, 0	Boolean
DisableKeepSignedInWithFacebook	Require fresh Facebook login upon client start.	Disabled, 0	Boolean
KeepSignedIn	Keep the user signed in to the client when relaunched. (Email login only)	Disabled, 0	Boolean
zAutoSSOLogin	Defaults login to SSO.	Disabled, 0	Boolean
zSSOHost	Set the default SSO URL for SSO login. For example, hooli.zoom.us would be set as "ForceSSOUrl=hooli".	Disabled, (empty)	String
ForceSSOURL	Set and lock the default SSO URL for SSO login. For example, hooli.zoom.us would be set as "ForceSSOUrl=hooli".	Disabled, (empty)	String
EnableEmbedBrowserForSSO	Use embedded browser in the client for SSO.	Disabled, 0	Boolean
SetWebDomain	Sets the web domain for logging in or joining a meeting. By default, the value is https://zoom.us or https://zoom.com.	Disabled, (empty)	String
DisableAutoLaunchSSO	Prevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL.	Disabled, 0	Boolean
EnablePhoneLogin	Enables login with phone authentication. (A)	Disabled, 0	Boolean
EnableAlipayLogin	Enables login with Alipay authentication. (A)	Disabled, 0	Boolean
EnablQQLogin	Enables login with QQ authentication. (A)	Disabled, 0	Boolean
EnableWeChatLogin	Enables login with WeChat authentication. (A)	Disabled, 0	Boolean
Account, your account ID	Restrict the client to only join meetings hosted by the specified account IDs. (B)	Disabled, (empty)	String
Login_Domain	Set the email address domain that users can login with, each separated by "&".  Example: zoom.us & hooli.com	Disabled, (empty)	String
EnableCloudSwitch	Enable the option to switch between Zoom commercial (default) and Zoom for Gov.	Disabled, 0	Boolean
EnforceSignInToJoin	Require users to be authenticated before joining a meeting with the desktop client.  Authentication can take place through the the web portal, if joining through join URL.	Disabled, 0	Boolean
EnforceAppSignInToJoin	Require authentication on the desktop client to join any meeting on the desktop client.	Disabled, 0	Boolean
EnforceSignInToJoinForWebinar	Require users to be authenticated before joining a webinar with the desktop client.  Authentication can take place through the the web portal, if joining through join URL.	Disabled, 0	Boolean
EnforceAppSignInToJoinForWebinar	Require authentication on the desktop client to join any webinar on the desktop client.	Disabled, 0	Boolean
SetDevicePolicyToken, device_token	Require internal meeting authentication. (C)	Disabled, (empty)	String
General meeting and client options
zDualMonitorOn	Enable dual monitor mode.	Disabled, 0	Boolean
FullScreenWhenJoin	When starting or joining a meeting, the meeting window will enter full-screen.	Disabled, 0	Boolean
DefaultUsePortraitView	Default to Portrait Mode upon opening Zoom.	Disabled, 0	Boolean
DisableClosedCaptioning	Disable the use of all closed captioning.	Disabled, 0	Boolean
DisableManualClosedCaptioning	Disable the use of manual, user-entered captioning.	Disabled, 0	Boolean
DisableQnA	Disable the use of Q&A in webinars.	Disabled, 0	Boolean
DisableMeetingReactions	Disable the use of Meeting reactions.	Disabled, 0	Boolean
DisableNonVerbalFeedback	Disable the use of Non-verbal feedback.	Disabled, 0	Boolean
DisableWebinarReactions	Disable the use of Webinar Reactions.	Disabled, 0	Boolean
DisableBroadcastBOMessage	Disable the ability for the host to broadcast a message to all open breakout rooms.	Disabled, 0	Boolean
ConfirmWhenLeave	Confirm before leaving a meeting.	Enabled, 1	Boolean
ShowConnectedTime	Display the length of time that the user has been in the current meeting.	Disabled, 0	Boolean
MuteWhenLockScreen	Automatically mute the microphone, when the screen is locked during a meeting.	Enabled, 1	Boolean
EnableRemindMeetingTime	Display reminder notifications for upcoming meetings.	Disabled, 0	Boolean
Video
zDisableRecvVideo	Disable receiving video.	Disabled, 0	Boolean
zDisableSendVideo	Disable sending video.	Disabled, 0	Boolean
zDisableVideo	Automatically turn off camera when joining a meeting.	Disabled, 0	Boolean
zUse720PByDefault	Use HD video in meetings.	Disabled, 0	Boolean
EnableMirrorEffect	Enable mirroring of your video. Mirror effect only affects your view of your video.	Enabled, 1	Boolean
EnableFaceBeauty	Enable Touch up my appearance.	Disabled, 0	Boolean
SetFaceBeautyValue	Used in conjunction with EnableFaceBeauty, this allows you to set the exact intensity of the Touch up my appearance filter.	(Disabled), 25	String
EnableLightAdaption	Enable Adjust for low-light video setting.	Disabled, 0	Boolean
EnableAutoLightAdaption	Set mode of adjusting low-light video feature. This is dependent on the EnableLightAdaption option. 1 - Auto 0 - Manual	Auto, 1	Boolean
SetLightAdaptionManualValue	Used in conjunction with EnableLightAdaption, this allows you to set the exact intensity of the low-light adjustment.	(Disabled), 20	String
AlwaysShowVideoPreviewDialog	Always show the video preview when joining a meeting.	Enabled, 1	Boolean
zHideNoVideoUser	Hide non-video participants by default.	Disabled, 0	Boolean
EnableSpotlightSelf	Show self as the active speaker when speaking.	Disabled, 0	Boolean
Enable49Video	Set max number of participants displayed in Gallery View to 49 participants per screen.	Disabled, 0	Boolean
VideoRenderMethod	Set the video rendering method: 0 - Auto 1 - Direct3D11 Flip Mode 2 - Direct3D11 3 - Direct3D9 4 - GDI	Auto, 0	String
Audio
DisableComputerAudio	Disable and remove the Computer Audio from the meeting audio options.	Disabled, 0	Boolean
SetUseSystemDefaultSpeakerForVOIP	Use the default system microphone.	Disabled, 0	Boolean
SetUseSystemDefaultMicForVOIP	Use the default system speakers.	Disabled, 0	Boolean
AudioAutoAdjust	Enable Automatically adjust microphone volume audio setting.	Enabled, 1	Boolean
SetSuppressBackgroundNoiseLevel	Set level of background noise suppression: 0 - Auto 1- Low 2 - Medium 3 - High	Auto (0)	String
zAutoJoinVoip	Automatically connect audio with computer audio when joining a meeting.	Disabled, 0	Boolean
MuteVoipWhenJoin	Mute computer audio microphone when joining a meeting.	Disabled, 0	Boolean
EnableHIDControl	Enables HID control of USB devices by the Zoom client.	Enabled, 1	Boolean
Screen sharing
DisableScreenShare	Disable the ability to share your screen in meetings and webinars. Note: This does not disable incoming screen sharing from other participants.	Disabled, 0	Boolean
zAutoFullScreenWhenViewShare	When viewing shared content, the content window automatically goes fullscreen.	Enabled, 1	Boolean
zAutoFitWhenViewShare	When viewing shared content, the content window automatically adjusts to fit the viewer's screen.	Enabled, 1	Boolean
zDisableAnnotation	Disable and remove the ability to annotate over shared screen.	Disabled, 0	Boolean
EnableShareAudio	Enable the Share computer audio option when sharing.	Enabled, 1	Boolean
EnableShareVideo	Enable the Optimize for video clip option when sharing.	Enabled, 1	Boolean
DisableWhiteboard	Disable Whiteboard feature.	Disabled, 0	Boolean
DisableSlideControl	Disable Slide Control feature.	Disabled, 0	Boolean
DisableDesktopShare	Disable the option to share your desktop when screen sharing.	Disabled, 0	Boolean
DisableRemoteControl	Disable Remote Control feature.	Disabled, 0	Boolean
DisableRemoteSupport	Disable Remote Support feature.	Enabled, 1	Boolean
zRemoteControllAllApp	Allow remote control of all applications.	Enabled, 1	Boolean
EnableShareClipboardWhenRemoteControl	Allow clipboard access during remote control.	Disabled, 0	Boolean
PresentInMeetingOption	Set sharing option when sharing directly to a Zoom Room within a meeting:  0 - Show all sharing options 1 - Automatically share desktop	Show all sharing options, 0	Boolean
EnableDoNotDisturbInSharing	Silence system notifications when sharing desktop.	Enabled, 1	Boolean
LegacyCaptureMode	Disable GPU acceleration.	Disabled, 0	Boolean
SetScreenCaptureMode	Set the screen capture mode: 0 - Auto 1 - Legacy operating systems 2 - Share with window filtering 3 - Advanced share with window filtering 4 - Advanced share without window filtering	Auto, 0	String
EnableHardwareOptimizeVideoSharing	Use hardware acceleration to optimize video sharing.	Enabled, 1	Boolean
Zoom Phone
HidePhoneInComingCallWhileInMeeting	Prevent incoming call notifications while in a meeting.	Disabled, 0	Boolean
EnableLaunchApp4IncomingCalls	Control the Launch an external app or a URL for incoming calls option in the client. This must be used in coordination with SetCommand4IncomingCalls, so that the URL can be configured as well.	Disabled, 0	Boolean
SetCommand4IncomingCalls	Set the URL used when the client receives an incoming call. This must be used in coordination with EnableLaunchApp4IncomingCalls.	Disabled, (empty)	String
In-meeting Chat
zDisableChat	Disable in-meeting chat.	Disabled, 0	Boolean
zDisableFT	Disable in-meeting file transfer. (sending or receiving)	Disabled, 0	Boolean
DisableMeeting3rdPartyFileStorage	Disable in-meeting 3rd party file transfer.	Disabled, 0	Boolean
Zoom Apps
DisableZoomApps	Hide the Zoom Apps button.	Disabled, 0	Boolean
DisableZoomAppsGuestAccess	Control the ability for users to utilize a Zoom App in Guest mode.	Disabled, 0	Boolean
Background and Filters
DisableVirtualBkgnd	Disable Virtual Background feature.	Disabled, 0	Boolean
DisableVideoFilters	Disable Video filters feature.	Disabled, 0	Boolean
EnableAutoReverseVirtualBkgnd	Require post-meeting virtual background auto-reversal.	Disabled, 0	Boolean
Recording
RecordPath, your_recording_path	Set the default recording location for local recordings.	/Users/User Name/Documents/Zoom	String
zDisableCMR	Disable recording to the cloud.	Disabled, 0	Boolean
zDisableLocalRecord	Disable recording locally on the device.	Disabled, 0	Boolean
Zoom Room and Room System calling
DisableDirectShare	Disable direct share with Zoom Rooms option.	Disabled, 0	Boolean
EnableStartMeetingWithRoomSystem	Display the Call Room System button on the home screen of the desktop client.	Disabled, 0	Boolean
PresentToRoomWithAudio	Share sound when screen sharing to a Zoom Room.	Enabled, 1	Boolean
PresentToRoomOptimizeVideo	Optimize screen sharing for video clip when sharing to a Zoom Room.	Enabled, 1	Boolean
PresentToRoomOption	Set sharing option when sharing to a Zoom Room: 0 - Show all sharing options 1 - Automatically share desktop	Automatically share desktop, 1	Boolean
Zoom Chat
DisableLinkPreviewInChat	Disable link previews.	Disabled, 0	Boolean
SetMessengerDoNotDropThread	Move messages with new replies to the bottom of the chat/channel.	Enabled, 1	Boolean
ShowProfilePhotosInChat	Controls if user profile pictures are shown in Zoom Chat.	Enabled, 1	Boolean
ShowVoiceMessageButton	Allow use of the Send audio message option.	Enabled, 1	Boolean
ShowVideoMessageButton	Allow use of the Send video message option.	Enabled, 1	Boolean
PlaySoundForIMMessage	Play audio notifications when an IM message is received.	Enabled, 1	Boolean
ShowIMMessagePreview	Allow message previews in system notifications when a chat message is received.	Enabled, 1	Boolean
MuteIMNotificationWhenInMeeting	Mute chat system notifications when in a meeting.	Enabled, 1	Boolean
Miscellaneous
EmbedUserAgentString	Embed a specified user agent string for all HTTP requests from Zoom client.	Disabled, (empty)	String
EmbedDeviceTag	Embed a specified device tag string for all HTTP requests from Zoom client application. This string will be appended to the head of the regular HTTP requests.	Disabled, (empty)	String
Intercloud Policies
OverrideEnforceSigninIntercloud	Override the EnforceSignInToJoin policy and allows a user to join a Zoom meeting hosted on the ZfG Cloud, without the need to authenticate.	Disabled, 0	Boolean
Intercloud_DisableAllFeatures	Disables all features except for audio and video for meetings hosted on the ZfG cloud.	Disabled, 0	Boolean
Intercloud_DisableMeetingChat	Disables the use of in-meeting chat on meetings hosted on the ZfG Cloud.	Disabled, 0	Boolean
Intercloud_DisableShareScreen	Disables the local ability to share screen on meetings hosted on the ZfG Cloud. This does not affect others' ability to shared content.	Disabled, 0	Boolean
Intercloud_DisableMeetingReactions	Disables the use of meeting reactions on meetings hosted on the ZfG Cloud.	Disabled, 0	Boolean
Intercloud_DisableMeetingFileTransfer	Disables the use of file transfers through in-meeting chat on meetings hosted on the ZfG Cloud.	Disabled, 0	Boolean
Intercloud_DisableAnnotation	Disables the local ability to annotate on shared content in meetings hosted on the ZfG Cloud. This does not affect others' ability to annotate.	Disabled, 0	Boolean
Intercloud_DisableWhiteBoard	Disables the use of in-meeting whiteboarding on meetings hosted on the ZfG Cloud.	Disabled, 0	Boolean
Intercloud_DisableLocalRecording	Disabled by default, this option disables the ability to locally record meetings hosted on the ZfG Cloud.	Disabled, 0	Boolean
Intercloud_DisableClosedCaptioning	Disabled by default, this option disables the use of captioning features on meetings hosted on the ZfG Cloud.	Disabled, 0	Boolean
Intercloud_DisableRemoteControl	Disabled by default, this option disables the remote control of shared screens in meetings hosted on the ZfG Cloud.	Disabled, 0	Boolean
Intercloud_DisableMeetingPolls	Disabled by default, this option disables the use of polling in meetings hosted on the ZfG Cloud.	Disabled, 0	Boolean
Intercloud_DisableComputerAudio	Disabled by default, this option disables the use of computer audio for connecting to meetings hosted on the ZfG Cloud.	Disabled, 0	Boolean

Notes:

• (A) These options are only available for devices in the China region.
• (B) Please have an account admin or owner contact Support to acquire your account ID.
• (C) Please have an account admin or owner contact Support to have this enabled for use. The owner will also need to edit a role to have view/edit access to Device Policy Management. The required token can then be retrieved from the Device Policy Management page.

**Important notes regarding AutoUpdate

The AutoUpdate option on versions prior to 5.8.6 is not a true auto-update feature. This option only allows the user to manually check for updates and the desktop client will not keep itself on the latest client version automatically. Please refer to the EnableSilentAutoUpdate or AlwaysCheckLatestVersion options, as these options enhance the AutoUpdate option to achieve something closer to a true auto-update functionality.

AutoUpdate on versions 5.8.6 and higher does allow for automatic download and installation of updates, based on Slow and Fast release cadences to best suit your needs. The cadence of releases you want to follow with AutoUpdate is configured with the SetUpdatingChannel option below.

Note: The VDI Host Installer is an MSI file type that can use the same switches as the standard client MSI installer. It can be deployed through normal software and device management tools. The VDI Client will respond to the same MSI configuration as the non-VDI client and can be configured accordingly, except for the AutoUpdate switch.

How to deploy Zoom

An example .plist file with settings from above enabled by default can be found here.

Once the .plist file is complete, it will need to be named us.zoom.config.plist. When deploying, as long as this file is in the same folder as the ZoomInstallerIT.pkg, the installation will automatically put the .plist file into the /Library/Preferences folder.

You can also deploy IT packages through JAMF, Intune, AirWatch, or other solutions, and push the .plist through them. The Zoom client will also try to read the us.zoom.config.plist. located in the /Library/Managed Preferences folder.