Mass-deploying with preconfigured settings for macOS
Last Updated:
IT Admin may choose to install Zoom with preconfigured settings on the Zoom desktop client for macOS. This installation requires configuring a .plist file and installing it along with the IT Admins Installer for macOS.
Settings can be enforced or set as just the default, which the end-user can still modify after deployment.
The desktop client can be enrolled in and managed through Zoom Device Management, which allows you to centrally control desktop client and mobile app settings in the Zoom web portal.
This article covers:
- How to download the admin desktop client installer
- Priority of settings
- How to create and configure the .plist file
Learn to install Zoom with preconfigured settings for Windows devices, Android devices, and iOS devices. You can also use Zoom’s own Device Management platform to centrally configure desktop client and mobile app settings.
Prerequisites for using the IT admin installer
- IT Admin version of the macOS desktop client
How to download the admin desktop client installer
- Go to the Zoom Download Center
- Click on Download for IT Admin, and then click the Download button under Zoom Client for Meetings.
Priority of settings
Settings can be configured in multiple places. While some can only be configured by the Zoom Admin or IT Admin, some settings can be configured by the end-user as well. If settings conflict, Zoom will use the following priority:
- Settings deployed and locked through ZDM
- Setting deployed via us.zoom.config.plist NOT set under PackageRecommend
- Web setting locked for the account or group
- Client setting selected by the user
- Settings deployed via us.zoom.config.plist set under PackageRecommend
- Web settings that are not locked
How to create and configure the .plist file
If you want to configure options for the Zoom desktop client on macOS, you need to create a .plist file. If you don't configure the .plist file, Zoom will be deployed with the default configuration.
How to require and recommend default settings
Settings configured through plist are either enforced or set as the default, but allow users to change them within the Zoom desktop client.
- If the plist key is set under PackageRecommend key, the client will install with those settings configured, but users will be able to change those options after deployment.
- If the plist key is set outside of the PackageRecommend key, the client will install with those settings required and unable to be adjusted by users.
For example, if you want to have the Automatically enter full screen when viewing shared content enabled by default, but completely disallow Google or Facebook logins, the plist file would be:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>NoGoogle</key>
<true/>
<key>NoFacebook</key>
<true/>
<key>PackageRecommend</key>
<dict>
<key>zAutoFullScreenWhenViewShare</key>
<true/>
</dict>
</dict>
</plist>
Available configuration options
Plist key | Description | Default state and value | Value type |
Install and update |
|||
zAutoUpdate | Enable updates through the client by users. When disabled, the Check for Updates button is also hidden. Please see AutoUpdate section for important details. |
Disabled, 0 | Boolean |
EnableSilentAutoUpdate | Allow the desktop client to silently check for updates and, if user’s version is lower than the stable version set by Zoom, install upon launching the client. This option requires the AutoUpdate option to be enabled. Please see AutoUpdate section for important details. |
Enabled, 1 | Boolean |
AlwaysCheckLatestVersion | Allow the desktop client to check for updates and, if user’s version is lower than the latest version released by Zoom, prompt the user to install the update. This option requires the AutoUpdate option to be enabled. Please see AutoUpdate section for important details. |
Disabled, 0 | Boolean |
SetUpdatingChannel | Control the cadence of updates applied to the desktop client (version 5.6.8 or higher): Slow (0): fewer updates and better stability. Fast (1): newest features and updates. Please see AutoUpdate section for important details. |
Slow, 0 | Boolean |
DisableDaemonInstall | Control if the desktop client can upgrade to the 64-bit version upon update, if the 32-bit version is installed on a 64-bit system. | Disabled, 0 | Boolean |
SetEnrollToken4CloudMDM, token | Enroll your device into Zoom Device Management with a token provided from the web portal. | Disabled, (empty) | String |
Network |
|||
BlockUntrustedSSLCert | Block connections to untrusted SSL certificates. | Enabled, 1 | Boolean |
DisableCertPin | Disable Certificate Pinning. | Disabled, 0 | Boolean |
ProxyPAC, your_pac_url | Set proxy server for desktop client with PAC URL. | Disabled, (empty) | String |
ProxyServer, proxy_address | Set a proxy server for desktop client as named proxy. Example: server: port |
Disabled, (empty) | String |
ProxyBypass, bypass_rule | Set proxy bypass rule for the desktop client. | Disabled, (empty) | String |
DisableAudioOverProxy | Prevent audio traffic over proxies. | Disabled, 0 | Boolean |
DisableVideoOverProxy | Prevent video traffic over proxies. | Disabled, 0 | Boolean |
DisableSharingOverProxy | Prevent screen sharing traffic over proxies. | Disabled, 0 | Boolean |
BandwidthLimitUp | Set maximum sending bandwidth for the desktop client. Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. |
Disabled, (empty) | String (all values in Kbps) |
BandwidthLimitDown | Set maximum receiving bandwidth for the desktop client. Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. |
Disabled, (empty) | String (all values in Kbps) |
IgnoreBandwidthLimits | Ignore bandwidth limit set on web settings. (Useful for exceptions to bandwidth restrictions) | Disabled, 0 | Boolean |
EnableIndependentDataPort | If enabled, the client will use the following ports for media transmission: Audio: 8803 Screen share: 8802 Video: 8801 |
Disabled, 0 | Boolean |
DisableDirectConnection2Web | Disable all direct connections to Zoom web service. | Disabled, 0 | Boolean |
Authentication |
|||
NoFacebook | Remove Facebook login option. | Disabled, 0 | Boolean |
NoGoogle | Remove Google login option. | Disabled, 0 | Boolean |
EnableAppleLogin | Allow access to Apple login option. | Enabled, 1 | Boolean |
NoSSO | Remove SSO login option. | Disabled, 0 | Boolean |
DisableLoginWithEmail | Remove Email login option. | Disabled, 0 | Boolean |
DisableKeepSignedInWithSSO | Require fresh SSO login upon client start. | Disabled, 0 | Boolean |
DisableKeepSignedInWithGoogle | Require fresh Google login upon client start. | Disabled, 0 | Boolean |
DisableKeepSignedInWithFacebook | Require fresh Facebook login upon client start. | Disabled, 0 | Boolean |
KeepSignedIn | Keep the user signed in to the client when relaunched. (Email login only) |
Disabled, 0 | Boolean |
zAutoSSOLogin | Defaults login to SSO. | Disabled, 0 | Boolean |
zSSOHost | Set the default SSO URL for SSO login. For example, hooli.zoom.us would be set as "ForceSSOUrl=hooli". |
Disabled, (empty) | String |
ForceSSOURL | Set and lock the default SSO URL for SSO login. For example, hooli.zoom.us would be set as "ForceSSOUrl=hooli". |
Disabled, (empty) | String |
EnableEmbedBrowserForSSO | Use embedded browser in the client for SSO. | Disabled, 0 | Boolean |
SetWebDomain | Sets the web domain for logging in or joining a meeting. By default, the value is https://zoom.us or https://zoom.com. |
Disabled, (empty) | String |
DisableAutoLaunchSSO | Prevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL. | Disabled, 0 | Boolean |
EnablePhoneLogin | Enables login with phone authentication. (A) | Disabled, 0 | Boolean |
EnableAlipayLogin | Enables login with Alipay authentication. (A) | Disabled, 0 | Boolean |
EnablQQLogin | Enables login with QQ authentication. (A) | Disabled, 0 | Boolean |
EnableWeChatLogin | Enables login with WeChat authentication. (A) | Disabled, 0 | Boolean |
Account, your account ID | Restrict the client to only join meetings hosted by the specified account IDs. (B) | Disabled, (empty) | String |
Login_Domain | Set the email address domain that users can login with, each separated by "&". Example: zoom.us & hooli.com |
Disabled, (empty) | String |
EnableCloudSwitch | Enable the option to switch between Zoom commercial (default) and Zoom for Gov. | Disabled, 0 | Boolean |
EnforceSignInToJoin | Require users to be authenticated before joining a meeting with the desktop client. Authentication can take place through the the web portal, if joining through join URL. | Disabled, 0 | Boolean |
EnforceAppSignInToJoin | Require authentication on the desktop client to join any meeting on the desktop client. | Disabled, 0 | Boolean |
EnforceSignInToJoinForWebinar | Require users to be authenticated before joining a webinar with the desktop client. Authentication can take place through the the web portal, if joining through join URL. | Disabled, 0 | Boolean |
EnforceAppSignInToJoinForWebinar | Require authentication on the desktop client to join any webinar on the desktop client. | Disabled, 0 | Boolean |
SetDevicePolicyToken, device_token | Require internal meeting authentication. (C) | Disabled, (empty) | String |
General meeting and client options |
|||
zDualMonitorOn | Enable dual monitor mode. | Disabled, 0 | Boolean |
FullScreenWhenJoin | When starting or joining a meeting, the meeting window will enter full-screen. | Disabled, 0 | Boolean |
DefaultUsePortraitView | Default to Portrait Mode upon opening Zoom. | Disabled, 0 | Boolean |
DisableClosedCaptioning | Disable the use of all closed captioning. | Disabled, 0 | Boolean |
DisableManualClosedCaptioning | Disable the use of manual, user-entered captioning. | Disabled, 0 | Boolean |
DisableQnA | Disable the use of Q&A in webinars. | Disabled, 0 | Boolean |
DisableMeetingReactions | Disable the use of Meeting reactions. | Disabled, 0 | Boolean |
DisableNonVerbalFeedback | Disable the use of Non-verbal feedback. | Disabled, 0 | Boolean |
DisableWebinarReactions |
Disable the use of Webinar Reactions. | Disabled, 0 | Boolean |
DisableBroadcastBOMessage |
Disable the ability for the host to broadcast a message to all open breakout rooms. | Disabled, 0 | Boolean |
ConfirmWhenLeave | Confirm before leaving a meeting. | Enabled, 1 | Boolean |
ShowConnectedTime | Display the length of time that the user has been in the current meeting. | Disabled, 0 | Boolean |
MuteWhenLockScreen | Automatically mute the microphone, when the screen is locked during a meeting. | Enabled, 1 | Boolean |
EnableRemindMeetingTime | Display reminder notifications for upcoming meetings. | Disabled, 0 | Boolean |
Video |
|||
zDisableRecvVideo | Disable receiving video. | Disabled, 0 | Boolean |
zDisableSendVideo | Disable sending video. | Disabled, 0 | Boolean |
zDisableVideo | Automatically turn off camera when joining a meeting. | Disabled, 0 | Boolean |
zUse720PByDefault | Use HD video in meetings. | Disabled, 0 | Boolean |
EnableMirrorEffect | Enable mirroring of your video. Mirror effect only affects your view of your video. | Enabled, 1 | Boolean |
EnableFaceBeauty | Enable Touch up my appearance. | Disabled, 0 | Boolean |
EnableLightAdaption | Enable Adjust for low-light video setting. | Disabled, 0 | Boolean |
EnableAutoLightAdaption | Set mode of adjusting low-light video feature. This is dependent on the EnableLightAdaption option. 1 - Auto 0 - Manual |
Auto, 1 | Boolean |
AlwaysShowVideoPreviewDialog | Always show the video preview when joining a meeting. | Enabled, 1 | Boolean |
zHideNoVideoUser | Hide non-video participants by default. | Disabled, 0 | Boolean |
EnableSpotlightSelf | Show self as the active speaker when speaking. | Disabled, 0 | Boolean |
Enable49Video | Set max number of participants displayed in Gallery View to 49 participants per screen. | Disabled, 0 | Boolean |
VideoRenderMethod | Set the video rendering method: 0 - Auto 1 - Direct3D11 Flip Mode 2 - Direct3D11 3 - Direct3D9 4 - GDI |
Auto, 0 | String |
Audio |
|||
DisableComputerAudio | Disable and remove the Computer Audio from the meeting audio options. | Disabled, 0 | Boolean |
SetUseSystemDefaultSpeakerForVOIP | Use the default system microphone. | Disabled, 0 | Boolean |
SetUseSystemDefaultMicForVOIP | Use the default system speakers. | Disabled, 0 | Boolean |
AudioAutoAdjust | Enable Automatically adjust microphone volume audio setting. | Enabled, 1 | Boolean |
SetSuppressBackgroundNoiseLevel | Set level of background noise suppression: 0 - Auto 1- Low 2 - Medium 3 - High |
Auto (0) | String |
zAutoJoinVoip | Automatically connect audio with computer audio when joining a meeting. | Disabled, 0 | Boolean |
MuteVoipWhenJoin | Mute computer audio microphone when joining a meeting. | Disabled, 0 | Boolean |
EnableHIDControl | Enables HID control of USB devices by the Zoom client. | Enabled, 1 | Boolean |
Screen sharing |
|||
DisableScreenShare | Disable the ability to share your screen in meetings and webinars. Note: This does not disable incoming screen sharing from other participants. |
Disabled, 0 | Boolean |
zAutoFullScreenWhenViewShare | When viewing shared content, the content window automatically goes fullscreen. | Enabled, 1 | Boolean |
zAutoFitWhenViewShare | When viewing shared content, the content window automatically adjusts to fit the viewer's screen. | Enabled, 1 | Boolean |
zDisableAnnotation | Disable and remove the ability to annotate over shared screen. | Disabled, 0 | Boolean |
EnableShareAudio | Enable the Share computer audio option when sharing. | Enabled, 1 | Boolean |
EnableShareVideo | Enable the Optimize for video clip option when sharing. | Enabled, 1 | Boolean |
DisableWhiteboard | Disable Whiteboard feature. | Disabled, 0 | Boolean |
DisableSlideControl | Disable Slide Control feature. | Disabled, 0 | Boolean |
DisableDesktopShare | Disable the option to share your desktop when screen sharing. | Disabled, 0 | Boolean |
DisableRemoteControl | Disable Remote Control feature. | Disabled, 0 | Boolean |
DisableRemoteSupport | Disable Remote Support feature. | Enabled, 1 | Boolean |
zRemoteControllAllApp | Allow remote control of all applications. | Enabled, 1 | Boolean |
EnableShareClipboardWhenRemoteControl | Allow clipboard access during remote control. | Disabled, 0 | Boolean |
PresentInMeetingOption | Set sharing option when sharing directly to a Zoom Room within a meeting: 0 - Show all sharing options 1 - Automatically share desktop |
Show all sharing options, 0 | Boolean |
EnableDoNotDisturbInSharing | Silence system notifications when sharing desktop. | Enabled, 1 | Boolean |
LegacyCaptureMode | Disable GPU acceleration. | Disabled, 0 | Boolean |
SetScreenCaptureMode | Set the screen capture mode: 0 - Auto 1 - Legacy operating systems 2 - Share with window filtering 3 - Advanced share with window filtering 4 - Advanced share without window filtering |
Auto, 0 | String |
EnableHardwareOptimizeVideoSharing | Use hardware acceleration to optimize video sharing. | Enabled, 1 | Boolean |
Zoom Phone |
|||
HidePhoneInComingCallWhileInMeeting | Prevent incoming call notifications while in a meeting. | Disabled, 0 | Boolean |
In-meeting Chat |
|||
zDisableChat | Disable in-meeting chat. | Disabled, 0 | Boolean |
zDisableFT | Disable in-meeting file transfer. (sending or receiving) | Disabled, 0 | Boolean |
DisableMeeting3rdPartyFileStorage | Disable in-meeting 3rd party file transfer. | Disabled, 0 | Boolean |
Zoom Apps |
|||
DisableZoomApps | Hide the Zoom Apps button. | Disabled, 0 | Boolean |
Background and Filters |
|||
DisableVirtualBkgnd | Disable Virtual Background feature. | Disabled, 0 | Boolean |
DisableVideoFilters | Disable Video filters feature. | Disabled, 0 | Boolean |
EnableAutoReverseVirtualBkgnd | Require post-meeting virtual background auto-reversal. | Disabled, 0 | Boolean |
Recording |
|||
RecordPath, your_recording_path | Set the default recording location for local recordings. | /Users/User Name/Documents/Zoom | String |
zDisableCMR | Disable recording to the cloud. | Disabled, 0 | Boolean |
zDisableLocalRecord | Disable recording locally on the device. | Disabled, 0 | Boolean |
Zoom Room and Room System calling |
|||
DisableDirectShare | Disable direct share with Zoom Rooms option. | Disabled, 0 | Boolean |
EnableStartMeetingWithRoomSystem | Display the Call Room System button on the home screen of the desktop client. | Disabled, 0 | Boolean |
PresentToRoomWithAudio | Share sound when screen sharing to a Zoom Room. | Enabled, 1 | Boolean |
PresentToRoomOptimizeVideo | Optimize screen sharing for video clip when sharing to a Zoom Room. | Enabled, 1 | Boolean |
PresentToRoomOption | Set sharing option when sharing to a Zoom Room: 0 - Show all sharing options 1 - Automatically share desktop |
Automatically share desktop, 1 | Boolean |
Zoom Chat |
|||
DisableLinkPreviewInChat | Disable link previews. | Disabled, 0 | Boolean |
SetMessengerDoNotDropThread | Move messages with new replies to the bottom of the chat/channel. | Disabled, 0 | Boolean |
ShowProfilePhotosInChat | Controls if user profile pictures are shown in Zoom Chat. | Disabled, 0 | Boolean |
ShowVoiceMessageButton | Allow use of the Send audio message option. | Enabled, 1 | Boolean |
ShowVideoMessageButton | Allow use of the Send video message option. | Enabled, 1 | Boolean |
PlaySoundForIMMessage | Play audio notifications when an IM message is received. | Enabled, 1 | Boolean |
ShowIMMessagePreview | Allow message previews in system notifications when a chat message is received. | Enabled, 1 | Boolean |
MuteIMNotificationWhenInMeeting | Mute chat system notifications when in a meeting. | Enabled, 1 | Boolean |
Miscellaneous |
|||
EmbedUserAgentString | Embed a specified user agent string for all HTTP requests from Zoom client. | Disabled, (empty) | String |
EmbedDeviceTag | Embed a specified device tag string for all HTTP requests from Zoom client application. This string will be appended to the head of the regular HTTP requests. | Disabled, (empty) | String |
Intercloud Policies |
|||
OverrideEnforceSigninIntercloud | Override the EnforceSignInToJoin policy and allows a user to join a Zoom meeting hosted on the ZfG Cloud, without the need to authenticate. | Disabled, 0 | Boolean |
Intercloud_DisableAllFeatures |
Disables all features except for audio and video for meetings hosted on the ZfG cloud. | Disabled, 0 | Boolean |
Intercloud_DisableMeetingChat |
Disables the use of in-meeting chat on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
Intercloud_DisableShareScreen |
Disables the local ability to share screen on meetings hosted on the ZfG Cloud. This does not affect others' ability to shared content. |
Disabled, 0 | Boolean |
Intercloud_DisableMeetingReactions |
Disables the use of meeting reactions on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
Intercloud_DisableMeetingFileTransfer |
Disables the use of file transfers through in-meeting chat on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
Intercloud_DisableAnnotation |
Disables the local ability to annotate on shared content in meetings hosted on the ZfG Cloud. This does not affect others' ability to annotate. |
Disabled, 0 | Boolean |
Intercloud_DisableWhiteBoard | Disables the use of in-meeting whiteboarding on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
Intercloud_DisableLocalRecording | Disabled by default, this option disables the ability to locally record meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
Intercloud_DisableClosedCaptioning | Disabled by default, this option disables the use of captioning features on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
Intercloud_DisableRemoteControl | Disabled by default, this option disables the remote control of shared screens in meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
Intercloud_DisableMeetingPolls |
Disabled by default, this option disables the use of polling in meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
Intercloud_DisableComputerAudio |
Disabled by default, this option disables the use of computer audio for connecting to meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
Notes:
- (A) These options are only available for devices in the China region.
- (B) Please have an account admin or owner contact Support to acquire your account ID.
- (C) Please have an account admin or owner contact Support to have this enabled for use. The owner will also need to edit a role to have view/edit access to Device Policy Management. The required token can then be retrieved from the Device Policy Management page.
**Important notes regarding AutoUpdate
The AutoUpdate option on versions prior to 5.8.6 is not a true auto-update feature. This option only allows the user to manually check for updates and the desktop client will not keep itself on the latest client version automatically. Please refer to the EnableSilentAutoUpdate or AlwaysCheckLatestVersion options, as these options enhance the AutoUpdate option to achieve something closer to a true auto-update functionality.
AutoUpdate on versions 5.8.6 and higher does allow for automatic download and installation of updates, based on Slow and Fast release cadences to best suit your needs. The cadence of releases you want to follow with AutoUpdate is configured with the SetUpdatingChannel option below.
Note: The VDI Host Installer is an MSI file type that can use the same switches as the standard client MSI installer. It can be deployed through normal software and device management tools. The VDI Client will respond to the same MSI configuration as the non-VDI client and can be configured accordingly, except for the AutoUpdate switch.
How to deploy Zoom
An example .plist file with settings from above enabled by default can be found here.
Once the .plist file is complete, it will need to be named us.zoom.config.plist. When deploying, as long as this file is in the same folder as the ZoomInstallerIT.pkg, the installation will automatically put the .plist file into the /Library/Preferences folder.
You can also deploy IT packages through JAMF, Intune, AirWatch, or other solutions, and push the .plist through them. The Zoom client will also try to read the us.zoom.config.plist. located in the /Library/Managed Preferences folder.
Zoom Community
Join the 100K+ other members in the Zoom Community! Login with your Zoom account credentials and start collaborating.