Mass-deploying with preconfigured settings for macOS

Last Updated:

IT Admin may choose to install Zoom with preconfigured settings on the Zoom desktop client for macOS. This installation requires configuring a .plist file and installing it along with the IT Admins Installer for macOS.

Settings can be enforced or set as just the default, which the end-user can still modify after deployment.

The desktop client can be enrolled in and managed through Zoom Device Management, which allows you to centrally control desktop client and mobile app settings in the Zoom web portal. 

This article covers:

Learn to install Zoom with preconfigured settings for Windows devices, Android devices, and iOS devices. You can also use Zoom’s own Device Management platform to centrally configure desktop client and mobile app settings.

Prerequisites for using the IT admin installer

  • IT Admin version of the macOS desktop client

How to download the admin desktop client installer

  1. Go to the Zoom Download Center
  2. Click on Download for IT Admin, and then click the Download button under Zoom Client for Meetings.

Priority of settings

Settings can be configured in multiple places. While some can only be configured by the Zoom Admin or IT Admin, some settings can be configured by the end-user as well. If settings conflict, Zoom will use the following priority:

  1. Settings deployed and locked through ZDM
  2. Setting deployed via us.zoom.config.plist NOT set under PackageRecommend
  3. Web setting locked for the account or group
  4. Client setting selected by the user
  5. Settings deployed via us.zoom.config.plist set under PackageRecommend
  6. Web settings that are not locked

How to create and configure the .plist file

If you want to configure options for the Zoom desktop client on macOS, you need to create a .plist file. If you don't configure the .plist file, Zoom will be deployed with the default configuration.

How to require and recommend default settings

Settings configured through plist are either enforced or set as the default, but allow users to change them within the Zoom desktop client.

  • If the plist key is set under PackageRecommend key, the client will install with those settings configured, but users will be able to change those options after deployment.
  • If the plist key is set outside of the PackageRecommend key, the client will install with those settings required and unable to be adjusted by users.

For example, if you want to have the Automatically enter full screen when viewing shared content enabled by default, but completely disallow Google or Facebook logins, the plist file would be:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>NoGoogle</key>
<true/>
<key>NoFacebook</key>
<true/>
<key>PackageRecommend</key>
<dict>
<key>zAutoFullScreenWhenViewShare</key>
<true/>
</dict>
</dict>
</plist>

Available configuration options

Plist key Description Default state and value Value type
Install and update
zAutoUpdate Enable updates through the client by users. When disabled, the Check for Updates button is also hidden.
Please see AutoUpdate section for important details.
Disabled, 0 Boolean
EnableSilentAutoUpdate Allow the desktop client to silently check for updates and, if user’s version is lower than the stable version set by Zoom, install upon launching the client. This option requires the AutoUpdate option to be enabled.
Please see AutoUpdate section for important details.
Enabled, 1 Boolean
AlwaysCheckLatestVersion Allow the desktop client to check for updates and, if user’s version is lower than the latest version released by Zoom, prompt the user to install the update. This option requires the AutoUpdate option to be enabled.
Please see AutoUpdate section for important details.
Disabled, 0 Boolean
SetUpdatingChannel Control the cadence of updates applied to the desktop client (version 5.6.8 or higher):
Slow (0): fewer updates and better stability.
Fast (1): newest features and updates.
Please see AutoUpdate section for important details.
Slow, 0 Boolean
DisableDaemonInstall Control if the desktop client can upgrade to the 64-bit version upon update, if the 32-bit version is installed on a 64-bit system. Disabled, 0 Boolean
SetEnrollToken4CloudMDM, token Enroll your device into Zoom Device Management with a token provided from the web portal. Disabled, (empty) String
Network
BlockUntrustedSSLCert Block connections to untrusted SSL certificates.  Enabled, 1 Boolean
DisableCertPin Disable Certificate Pinning. Disabled, 0 Boolean
ProxyPAC, your_pac_url Set proxy server for desktop client with PAC URL.  Disabled, (empty) String
ProxyServer, proxy_address Set a proxy server for desktop client as named proxy.
Example: server: port
Disabled, (empty) String
ProxyBypass, bypass_rule Set proxy bypass rule for the desktop client.  Disabled, (empty) String
DisableAudioOverProxy Prevent audio traffic over proxies.  Disabled, 0 Boolean
DisableVideoOverProxy Prevent video traffic over proxies. Disabled, 0 Boolean
DisableSharingOverProxy Prevent screen sharing traffic over proxies. Disabled, 0 Boolean
BandwidthLimitUp Set maximum sending bandwidth for the desktop client. 
Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.
Disabled, (empty) String (all values in Kbps)
BandwidthLimitDown Set maximum receiving bandwidth for the desktop client.
Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.
Disabled, (empty) String (all values in Kbps)
IgnoreBandwidthLimits Ignore bandwidth limit set on web settings. (Useful for exceptions to bandwidth restrictions) Disabled, 0 Boolean
EnableIndependentDataPort If enabled, the client will use the following ports for media transmission:
Audio: 8803
Screen share: 8802
Video: 8801
Disabled, 0 Boolean
DisableDirectConnection2Web Disable all direct connections to Zoom web service. Disabled, 0 Boolean
Authentication
NoFacebook Remove Facebook login option. Disabled, 0 Boolean
NoGoogle Remove Google login option. Disabled, 0 Boolean
EnableAppleLogin Allow access to Apple login option.  Enabled, 1 Boolean
NoSSO Remove SSO login option. Disabled, 0 Boolean
DisableLoginWithEmail Remove Email login option. Disabled, 0 Boolean
DisableKeepSignedInWithSSO Require fresh SSO login upon client start. Disabled, 0 Boolean
DisableKeepSignedInWithGoogle Require fresh Google login upon client start. Disabled, 0 Boolean
DisableKeepSignedInWithFacebook Require fresh Facebook login upon client start. Disabled, 0 Boolean
KeepSignedIn Keep the user signed in to the client when relaunched.
(Email login only)
Disabled, 0 Boolean
zAutoSSOLogin Defaults login to SSO. Disabled, 0 Boolean
zSSOHost Set the default SSO URL for SSO login.
For example, hooli.zoom.us would be set as "ForceSSOUrl=hooli".
Disabled, (empty) String
ForceSSOURL Set and lock the default SSO URL for SSO login.
For example, hooli.zoom.us would be set as "ForceSSOUrl=hooli".
Disabled, (empty) String
EnableEmbedBrowserForSSO Use embedded browser in the client for SSO. Disabled, 0 Boolean
SetWebDomain Sets the web domain for logging in or joining a meeting.
By default, the value is https://zoom.us or https://zoom.com.
Disabled, (empty) String
DisableAutoLaunchSSO Prevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL. Disabled, 0 Boolean
EnablePhoneLogin Enables login with phone authentication. (A) Disabled, 0 Boolean
EnableAlipayLogin Enables login with Alipay authentication. (A) Disabled, 0 Boolean
EnablQQLogin Enables login with QQ authentication. (A) Disabled, 0 Boolean
EnableWeChatLogin Enables login with WeChat authentication. (A) Disabled, 0 Boolean
Account, your account ID Restrict the client to only join meetings hosted by the specified account IDs. (B)  Disabled, (empty) String
Login_Domain Set the email address domain that users can login with, each separated by "&". 
Example: zoom.us & hooli.com
Disabled, (empty) String
EnableCloudSwitch Enable the option to switch between Zoom commercial (default) and Zoom for Gov. Disabled, 0 Boolean
EnforceSignInToJoin Require users to be authenticated before joining a meeting with the desktop client.  Authentication can take place through the the web portal, if joining through join URL. Disabled, 0 Boolean
EnforceAppSignInToJoin Require authentication on the desktop client to join any meeting on the desktop client. Disabled, 0 Boolean
EnforceSignInToJoinForWebinar Require users to be authenticated before joining a webinar with the desktop client.  Authentication can take place through the the web portal, if joining through join URL. Disabled, 0 Boolean
EnforceAppSignInToJoinForWebinar Require authentication on the desktop client to join any webinar on the desktop client. Disabled, 0 Boolean
SetDevicePolicyToken, device_token Require internal meeting authentication. (C) Disabled, (empty) String
General meeting and client options
zDualMonitorOn Enable dual monitor mode. Disabled, 0 Boolean
FullScreenWhenJoin When starting or joining a meeting, the meeting window will enter full-screen. Disabled, 0 Boolean
DefaultUsePortraitView Default to Portrait Mode upon opening Zoom. Disabled, 0 Boolean
DisableClosedCaptioning Disable the use of all closed captioning. Disabled, 0 Boolean
DisableManualClosedCaptioning Disable the use of manual, user-entered captioning. Disabled, 0 Boolean
DisableQnA Disable the use of Q&A in webinars. Disabled, 0 Boolean
DisableMeetingReactions Disable the use of Meeting reactions. Disabled, 0 Boolean
DisableNonVerbalFeedback Disable the use of Non-verbal feedback. Disabled, 0 Boolean
DisableWebinarReactions
Disable the use of Webinar Reactions Disabled, 0 Boolean

DisableBroadcastBOMessage

Disable the ability for the host to broadcast a message to all open breakout rooms.  Disabled, 0 Boolean
ConfirmWhenLeave Confirm before leaving a meeting. Enabled, 1 Boolean
ShowConnectedTime Display the length of time that the user has been in the current meeting. Disabled, 0 Boolean
MuteWhenLockScreen Automatically mute the microphone, when the screen is locked during a meeting. Enabled, 1 Boolean
EnableRemindMeetingTime Display reminder notifications for upcoming meetings. Disabled, 0 Boolean
Video
zDisableRecvVideo Disable receiving video. Disabled, 0 Boolean
zDisableSendVideo Disable sending video. Disabled, 0 Boolean
zDisableVideo Automatically turn off camera when joining a meeting. Disabled, 0 Boolean
zUse720PByDefault Use HD video in meetings. Disabled, 0 Boolean
EnableMirrorEffect Enable mirroring of your video. Mirror effect only affects your view of your video.  Enabled, 1 Boolean
EnableFaceBeauty Enable Touch up my appearance. Disabled, 0 Boolean
SetFaceBeautyValue Used in conjunction with EnableFaceBeauty, this allows you to set the exact intensity of the Touch up my appearance filter.  (Disabled), 25 String
EnableLightAdaption Enable Adjust for low-light video setting. Disabled, 0 Boolean
EnableAutoLightAdaption Set mode of adjusting low-light video feature. This is dependent on the EnableLightAdaption option.
1 - Auto
0 - Manual
Auto, 1 Boolean
SetLightAdaptionManualValue Used in conjunction with EnableLightAdaption, this allows you to set the exact intensity of the low-light adjustment.  (Disabled), 20 String
AlwaysShowVideoPreviewDialog Always show the video preview when joining a meeting. Enabled, 1 Boolean
zHideNoVideoUser Hide non-video participants by default. Disabled, 0 Boolean
EnableSpotlightSelf Show self as the active speaker when speaking. Disabled, 0 Boolean
Enable49Video Set max number of participants displayed in Gallery View to 49 participants per screen. Disabled, 0 Boolean
VideoRenderMethod Set the video rendering method:
0 - Auto
1 - Direct3D11 Flip Mode
2 - Direct3D11
3 - Direct3D9
4 - GDI
Auto, 0 String
Audio
DisableComputerAudio Disable and remove the Computer Audio from the meeting audio options. Disabled, 0 Boolean
SetUseSystemDefaultSpeakerForVOIP Use the default system microphone. Disabled, 0 Boolean
SetUseSystemDefaultMicForVOIP Use the default system speakers. Disabled, 0 Boolean
AudioAutoAdjust Enable Automatically adjust microphone volume audio setting. Enabled, 1 Boolean
SetSuppressBackgroundNoiseLevel Set level of background noise suppression:
0 - Auto
1- Low
2 - Medium
3 - High
Auto (0) String
zAutoJoinVoip Automatically connect audio with computer audio when joining a meeting. Disabled, 0 Boolean
MuteVoipWhenJoin Mute computer audio microphone when joining a meeting. Disabled, 0 Boolean
EnableHIDControl Enables HID control of USB devices by the Zoom client. Enabled, 1 Boolean
Screen sharing
DisableScreenShare Disable the ability to share your screen in meetings and webinars.
Note: This does not disable incoming screen sharing from other participants. 
Disabled, 0 Boolean
zAutoFullScreenWhenViewShare When viewing shared content, the content window automatically goes fullscreen. Enabled, 1 Boolean
zAutoFitWhenViewShare When viewing shared content, the content window automatically adjusts to fit the viewer's screen. Enabled, 1 Boolean
zDisableAnnotation Disable and remove the ability to annotate over shared screen. Disabled, 0 Boolean
EnableShareAudio Enable the Share computer audio option when sharing. Enabled, 1 Boolean
EnableShareVideo Enable the Optimize for video clip option when sharing. Enabled, 1 Boolean
DisableWhiteboard Disable Whiteboard feature. Disabled, 0 Boolean
DisableSlideControl Disable Slide Control feature. Disabled, 0 Boolean
DisableDesktopShare Disable the option to share your desktop when screen sharing. Disabled, 0 Boolean
DisableRemoteControl Disable Remote Control feature.  Disabled, 0 Boolean
DisableRemoteSupport Disable Remote Support feature. Enabled, 1 Boolean
zRemoteControllAllApp Allow remote control of all applications. Enabled, 1 Boolean
EnableShareClipboardWhenRemoteControl Allow clipboard access during remote control. Disabled, 0 Boolean
PresentInMeetingOption Set sharing option when sharing directly to a Zoom Room within a meeting: 
0 - Show all sharing options
1 - Automatically share desktop
Show all sharing options, 0 Boolean
EnableDoNotDisturbInSharing Silence system notifications when sharing desktop. Enabled, 1 Boolean
LegacyCaptureMode Disable GPU acceleration. Disabled, 0 Boolean
SetScreenCaptureMode Set the screen capture mode:
0 - Auto
1 - Legacy operating systems
2 - Share with window filtering
3 - Advanced share with window filtering
4 - Advanced share without window filtering
Auto, 0 String
EnableHardwareOptimizeVideoSharing Use hardware acceleration to optimize video sharing. Enabled, 1 Boolean
Zoom Phone
HidePhoneInComingCallWhileInMeeting Prevent incoming call notifications while in a meeting. Disabled, 0 Boolean
EnableLaunchApp4IncomingCalls Control the Launch an external app or a URL for incoming calls option in the client.
This must be used in coordination with SetCommand4IncomingCalls, so that the URL can be configured as well.
Disabled, 0 Boolean
SetCommand4IncomingCalls Set the URL used when the client receives an incoming call.
This must be used in coordination with EnableLaunchApp4IncomingCalls.
Disabled, (empty) String
In-meeting Chat
zDisableChat Disable in-meeting chat. Disabled, 0 Boolean
zDisableFT Disable in-meeting file transfer. (sending or receiving) Disabled, 0 Boolean
DisableMeeting3rdPartyFileStorage Disable in-meeting 3rd party file transfer. Disabled, 0 Boolean
Zoom Apps
DisableZoomApps Hide the Zoom Apps button. Disabled, 0 Boolean

DisableZoomAppsGuestAccess

Control the ability for users to utilize a Zoom App in Guest mode. Disabled, 0 Boolean
Background and Filters
DisableVirtualBkgnd Disable Virtual Background feature. Disabled, 0 Boolean
DisableVideoFilters Disable Video filters feature. Disabled, 0 Boolean
EnableAutoReverseVirtualBkgnd Require post-meeting virtual background auto-reversal. Disabled, 0 Boolean
Recording
RecordPath, your_recording_path Set the default recording location for local recordings. /Users/User Name/Documents/Zoom String
zDisableCMR Disable recording to the cloud. Disabled, 0 Boolean
zDisableLocalRecord Disable recording locally on the device. Disabled, 0 Boolean
Zoom Room and Room System calling
DisableDirectShare Disable direct share with Zoom Rooms option. Disabled, 0 Boolean
EnableStartMeetingWithRoomSystem Display the Call Room System button on the home screen of the desktop client. Disabled, 0 Boolean
PresentToRoomWithAudio Share sound when screen sharing to a Zoom Room. Enabled, 1 Boolean
PresentToRoomOptimizeVideo Optimize screen sharing for video clip when sharing to a Zoom Room. Enabled, 1 Boolean
PresentToRoomOption Set sharing option when sharing to a Zoom Room:
0 - Show all sharing options
1 - Automatically share desktop
Automatically share desktop, 1 Boolean
Zoom Chat
DisableLinkPreviewInChat Disable link previews. Disabled, 0 Boolean
SetMessengerDoNotDropThread Move messages with new replies to the bottom of the chat/channel. Enabled, 1 Boolean
ShowProfilePhotosInChat Controls if user profile pictures are shown in Zoom Chat. Enabled, 1 Boolean
ShowVoiceMessageButton Allow use of the Send audio message option. Enabled, 1 Boolean
ShowVideoMessageButton Allow use of the Send video message option. Enabled, 1 Boolean
PlaySoundForIMMessage Play audio notifications when an IM message is received. Enabled, 1 Boolean
ShowIMMessagePreview Allow message previews in system notifications when a chat message is received. Enabled, 1 Boolean
MuteIMNotificationWhenInMeeting Mute chat system notifications when in a meeting. Enabled, 1 Boolean
Miscellaneous
EmbedUserAgentString Embed a specified user agent string for all HTTP requests from Zoom client. Disabled, (empty) String
EmbedDeviceTag Embed a specified device tag string for all HTTP requests from Zoom client application. This string will be appended to the head of the regular HTTP requests. Disabled, (empty) String
Intercloud Policies
OverrideEnforceSigninIntercloud Override the EnforceSignInToJoin policy and allows a user to join a Zoom meeting hosted on the ZfG Cloud, without the need to authenticate. Disabled, 0 Boolean

Intercloud_DisableAllFeatures

Disables all features except for audio and video for meetings hosted on the ZfG cloud.  Disabled, 0 Boolean

Intercloud_DisableMeetingChat

Disables the use of in-meeting chat on meetings hosted on the ZfG Cloud. Disabled, 0 Boolean

Intercloud_DisableShareScreen

Disables the local ability to share screen on meetings hosted on the ZfG Cloud.
This does not affect others' ability to shared content.
Disabled, 0 Boolean

Intercloud_DisableMeetingReactions

Disables the use of meeting reactions on meetings hosted on the ZfG Cloud. Disabled, 0 Boolean

Intercloud_DisableMeetingFileTransfer

Disables the use of file transfers through in-meeting chat on meetings hosted on the ZfG Cloud. Disabled, 0 Boolean

Intercloud_DisableAnnotation

Disables the local ability to annotate on shared content in meetings hosted on the ZfG Cloud.
This does not affect others' ability to annotate.
Disabled, 0 Boolean
Intercloud_DisableWhiteBoard Disables the use of in-meeting whiteboarding on meetings hosted on the ZfG Cloud. Disabled, 0 Boolean
Intercloud_DisableLocalRecording Disabled by default, this option disables the ability to locally record meetings hosted on the ZfG Cloud.  Disabled, 0 Boolean
Intercloud_DisableClosedCaptioning Disabled by default, this option disables the use of captioning features on meetings hosted on the ZfG Cloud.  Disabled, 0 Boolean
Intercloud_DisableRemoteControl Disabled by default, this option disables the remote control of shared screens in meetings hosted on the ZfG Cloud.  Disabled, 0 Boolean

Intercloud_DisableMeetingPolls

Disabled by default, this option disables the use of polling in meetings hosted on the ZfG Cloud.  Disabled, 0 Boolean

Intercloud_DisableComputerAudio

Disabled by default, this option disables the use of computer audio for connecting to meetings hosted on the ZfG Cloud.  Disabled, 0 Boolean

Notes:

  • (A) These options are only available for devices in the China region.
  • (B) Please have an account admin or owner contact Support to acquire your account ID.
  • (C) Please have an account admin or owner contact Support to have this enabled for use. The owner will also need to edit a role to have view/edit access to Device Policy Management. The required token can then be retrieved from the Device Policy Management page.

**Important notes regarding AutoUpdate

The AutoUpdate option on versions prior to 5.8.6 is not a true auto-update feature. This option only allows the user to manually check for updates and the desktop client will not keep itself on the latest client version automatically. Please refer to the EnableSilentAutoUpdate or AlwaysCheckLatestVersion options, as these options enhance the AutoUpdate option to achieve something closer to a true auto-update functionality.

AutoUpdate on versions 5.8.6 and higher does allow for automatic download and installation of updates, based on Slow and Fast release cadences to best suit your needs. The cadence of releases you want to follow with AutoUpdate is configured with the SetUpdatingChannel option below.

Note: The VDI Host Installer is an MSI file type that can use the same switches as the standard client MSI installer. It can be deployed through normal software and device management tools. The VDI Client will respond to the same MSI configuration as the non-VDI client and can be configured accordingly, except for the AutoUpdate switch.

How to deploy Zoom

An example .plist file with settings from above enabled by default can be found here.

Once the .plist file is complete, it will need to be named us.zoom.config.plist. When deploying, as long as this file is in the same folder as the ZoomInstallerIT.pkg, the installation will automatically put the .plist file into the /Library/Preferences folder.

You can also deploy IT packages through JAMF, Intune, AirWatch, or other solutions, and push the .plist through them. The Zoom client will also try to read the us.zoom.config.plist. located in the /Library/Managed Preferences folder.

Zoom Community

Join the 100K+ other members in the Zoom Community! Login with your Zoom account credentials and start collaborating.