Mass deployment with preconfigured settings for Windows Follow

Overview

The Zoom Desktop Client can be mass configured for Windows in three different ways: via the MSI installer for both configuration and installation, an Active Directory administrative template utilizing Group Policy for configuration, or via registry keys for configuration.

Zoom Rooms for Windows can also be configured with an Active Directory administrative template utilizing Group Policy or registry keys.

If utilizing the MSI installer, Zoom can be deployed via GPO or SCCM. If installing the client via GPO script, install using a startup script for the desktop client. If you also want to deploy the Outlook plugin via GPO script, install using a logon script.

Installing with an Active Directory Administrative Template or registry keys, administrators can lock certain features and settings upon deployment of Zoom. 

Note: MSI installations require elevated administrative rights. 

This article covers:

• Downloading the MSI installer
• Priority of settings
• Deploying and configuring the Zoom desktop client
  
  • Command-line deployment
  • Intune deployment
• Configuration options for the Zoom desktop client
  
  • General settings
  • Meeting settings
  • Chat settings
  • Other parameters
• Uninstall switches
• Configuration options for Zoom Rooms for Windows
  
  • System options
• Configuration options for the Outlook Plugin for Windows
• Active Directory Administrative Template configuration

Learn to install Zoom with preconfigured settings for Mac.

Prerequisites

• MSI version of the Windows Desktop Client 
• Zoom Rooms for PC

Note: Some of the switches listed below require the latest version of the Zoom IT Installer.

Downloading the MSI installer

Go to Download Center, and click on Download for IT Admin; or directly from https://www.zoom.us/client/latest/ZoomInstallerFull.msi

Priority of settings

Settings can be configured in multiple places. Some can only be configured by the Zoom Admin or IT Admin and some can be configured by the end user. If settings conflict, Zoom will use the following priority:

• Setting deployed via MSI/GPO with ZConfig
• Web setting locked for the account or group
• Client setting selected by the user
• Setting deployed via MSI/GPO with ZRecommend
• Web setting that are not locked

Deploying and configuring the Zoom desktop client

Command-line deployment

Install: msiexec /package ZoomInstallerFull.msi /lex zoommsi.log

Silent install: msiexec /i ZoomInstallerFull.msi /quiet /qn /norestart /log install.log

Wait until in-progress meeting ends before installing:  msiexec /i ZoomInstallerFull.msi /norestart MSIRESTARTMANAGERCONTROL=”Disable”

Silent auto-start: Disabled by default, this option makes the desktop client automatically and silently start with Windows. To enable, append zSilentStart="true" to the end of your install choice.

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log zSilentStart="true"

No desktop shortcut: Disabled by default, this option prevents the creation of a desktop shortcut on install or update. To enable, append zNoDesktopShortCut="true" to the end of your install choice.

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZNoDesktopShortCut="true"

Preconfigure SSO URL: Disabled by default, this option allows you to preconfigure the SSO URL. To set a URL, append zSSOHost="vanity_URL" to the end of your install choice. For example, hooli.zoom.us can be set with any of the following formats: 

• "hooli"
• "https://hooli"
• "hooli.zoom.us"
  

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log zSSOHost="vanity_URL"

Auto-update: Disabled by default, this will remove the Check for Updates option in the client and thus not allow users to check for and install updates for the Zoom client. If auto-update is enabled, users will be able to check for updates in the client and will not require elevated admin rights to update. To enable and allow users to update the Zoom client, append ZoomAutoUpdate="true" to your install choice:

msiexec /package  ZoomInstallerFull. msi /lex zoommsi.log ZoomAutoUpdate="true"

Notes:

• Auto-update is not a true auto-update feature. This only allows the user to manually check for updates and the desktop client will not keep itself on the latest client version automatically. Please refer to EnableSilentAutoUpdatefor or AlwaysCheckLatestVersion auto-update options below. 
• The VDI client will not respond to the auto-update switch.

Advanced Sharing Service: Enabled by default, this option can disable this service, which can prevent prompting for admin credentials during upgrading. If this service is disabled, the auto updating experience may be affected slightly. To disable, append DisableAdvancedSharingService=true to the end of your install choice.

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log DisableAdvancedSharingService=true

Firewall port start and end: Sets the inbound and outbound firewall rules for the Zoom client. FirewallPortStart and FirewallPortEnd need to be configured together, as Zoom does not recommend enabling one without enabling the other. 

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log FirewallPortStart="7200" FirewallPortEnd="17210"

Additional Configuration Options

zConfig: To enable additional options, append the ZConfig parameter to the end of your install choice. Separate multiple options by ';':

msiexec /package ZoomInstaller.msi /norestart /lex msi.log ZConfig="account=your_account_id;nogoogle=1;nofacebook=1;login_domain=yourcompany.com&yourcompany2.com"

Additional options for ZConfig are listed in the tables below.

Allow users to change settings: to deploy settings but allow users to change them within the Zoom desktop client, deploy with "ZRecommend" instead of "ZConfig". For example, msiexec /i ZoomInstallerFull.msi ZRecommend="AudioAutoAdjust=1"  

If you want to force certain settings, but allow users to change other default settings, use both ZConfig and ZRecommend . For example, msiexec /i ZoomInstallerFull.msi  ZConfig="nogoogle=1" ZRecommend="AudioAutoAdjust=1" 

Note: If a setting has been set for both ZConfig and ZRecommend, ZConfig will still lock the setting, and can not be changed by the user. 

Intune deployment

1. Log in to Microsoft Intune.
2. Click Client apps.
3. Click Apps.
4. Click Add.
5. For App type, select Line-of-business app, then click Select.
6. Click Select app package file.
7. Click Select a file, and choose the ZoomInstallFull.msi. 
8. Click OK.
9. In the App information tab enter the following:
   • Description- Enter the description of the app, i.e Zoom Meeting app.
   • Publisher- Enter Zoom Video Communications.
   • App install context- Click Device.
   • Command-line arguments- Enter any MSI installation switches
     • For enabling default settings that need to be locked, begin each setting switch with ZConfig. Ex. ZConfig=”nogoogle=1”.
     • For enabling default settings, that users can change, begin each setting switch with ZRecommend. Ex. ZRecommend=”AudioAutoAdjust=1”.
     
10. Click Next.
11. Add any desired Scope tags.
12. Click Next.
13. Set if the app is required for any specific user groups, all users, and/or all devices.
14. Click Next.
15. Review the deployment summary, then click Create.

Configuration options

Note: Registry entries for the following settings will be located in HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\ZoomUMX\

General settings

Meeting settings

 

Chat settings

Other parameters

Meeting Options: Disabled by default. To require these settings, append ZConfig="kCmdParam_InstallOption=X". X represents a numeric value.

The values and options enabled are as follows:

Value	Option
1	Turn Off Camera when Joining a Meeting
2	Automatically Join VoIP
4	Automatically enable dual monitor
8	Default to login with SSO
16	Automatically enter full screen when viewing shared content
32	Automatically fit to window when viewing shared content
64	Enable 720p by default
128	Remote control all applications

To enable multiple settings, add the values. For example, to enable Automatically Join VoIP (2) AND 720p by default (64), set the ZoomInstall option to 66:

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZConfig="kCmdParam_InstallOption=66"

You can also configure Microsoft command line options. 

Uninstall switches

To uninstall Zoom completely please use the following uninstaller. It is generally not necessary to use the clean uninstaller when updating to a new version of Zoom, as deploying the new version will replace the former.

The following switches are available when running the installer:

Command	Function
/silent	Removes Zoom silently
/keep_outlook_plugin	Removes Zoom, but leaves the Outlook Plugin installed
/keep_lync_plugin	Removes Zoom, but leaves the Lync/Skype for Business Plugin installed
/keep_notes_plugin	Removes Zoom, but leaves the Notes Plugin installed
/vdi_clean	Removes the vdi package

Note: Use of the clean uninstaller will completely remove the Zoom client, as well as the Zoom plugin for Outlook. The Outlook add-in, Chrome/Firefox extensions, and GSuite add-on are unaffected. 

Configuration options for Zoom Rooms for Windows