Help Center
Overview
The Zoom Desktop Client can be mass configured for Windows in 3 different ways: via the MSI installer for both configuration and installation, an Active Directory administrative template utilizing Group Policy for configuration, or via registry keys for configuration.
Zoom Rooms for Windows can also be configured with an Active Directory administrative template utilizing Group Policy or registry keys.
If utilizing the MSI installer, Zoom can be deployed via GPO or SCCM. If installing the client via GPO script, install using a startup script for the desktop client. If you also want to deploy the Outlook plugin via GPO script, install using a logon script.
Installing with an Active Directory Administrative Template or registry keys, administrators can lock certain features and settings upon deployment of Zoom.
Note: MSI installations require elevated administrative rights.
This article covers:
- Downloading the MSI Installer
- Priority of Settings
- Deploying and Configuring the Zoom Desktop Client
- Configuration options for the Zoom Desktop Client
- Configuration options for Zoom Rooms for Windows
- Active Directory Administrative Template configuration
Learn to install Zoom with preconfigured settings for Mac.
Prerequisites
- MSI version of the Windows Desktop Client
- Zoom Rooms for PC
Note: Some of the switches listed below require the latest version of the Zoom IT Installer.
Downloading the MSI Installer
Go to Download Center, and click on Download for IT Admin; or directly from https://www.zoom.us/client/latest/ZoomInstallerFull.msi
Priority of Settings
Settings can be configured in multiple places. Some can only be configured by the Zoom Admin or IT Admin and some can be configured by the end user. If settings conflict, Zoom will use the following priority:
- Setting deployed via MSI/GPO with ZConfig
- Web setting locked for the account or group
- Client setting selected by the user
- Setting deployed via MSI/GPO with ZRecommend
- Web setting that are not locked
Deploying and Configuring the Zoom Desktop Client
Command-line deployment
Install: msiexec /package ZoomInstallerFull.msi /lex zoommsi.log
Silent install: msiexec /i ZoomInstallerFull.msi /quiet /qn /norestart /log install.log
Wait until in-progress meeting ends before installing: msiexec /i ZoomInstallerFull.msi /norestart MSIRESTARTMANAGERCONTROL=”Disable”
Auto-update: Disabled by default, and will not allow users to install updates for the Zoom client. If auto-update is enabled, users will not require elevated admin rights to update. To enable (allow users to update the Zoom client), append ZoomAutoUpdate="true" to your install choice:
msiexec /package ZoomInstallerFull.
Auto-start with Windows*: Disabled by default. To enable, append ZoomAutoStart="true" to the end of your install choice:
msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZoomAutoStart="true"
Auto-start Silently with Windows*: Disabled by default. To enable, append ZSILENTSTART="true" to the end of your install choice:
msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZSILENTSTART="true"
Do not create Desktop Shortcut: Disabled by default. To enable, append ZNoDesktopShortCut="true" to the end of your install choice:
msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZNoDesktopShortCut="true"
Preconfigure SSO URL: Disabled by default. To enable, append ZSSOHOST="your_company". So full SSO endpoints such as https://your_company.zoom.us , the input can be:
- your_company
- https://your_company
- your_company.zoom.us
msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZSSOHOST="your_company"
Additional Configuration Options - ZConfig: To enable additional options, append the ZConfig parameter to the end of your install choice. Separate multiple options by ';':
msiexec /package ZoomInstaller.msi /norestart /lex msi.log ZConfig="account=your_account_id;nogoogle=1;nofacebook=1;login_domain=yourcompany.com&yourcompany2.com"
Additional options for ZConfig are listed in the table below.
Allow users to change settings: to deploy settings but allow users to change them within the Zoom desktop client, deploy with "ZRecommend" instead of "ZConfig". For example, msiexec /i ZoomInstallerFull.msi ZRecommend="AudioAutoAdjust=1"
If you want to force certain settings, but allow users to change other default settings, use both ZConfig and ZRecommend . For example, msiexec /i ZoomInstallerFull.msi ZConfig="nogoogle=1" ZRecommend="AudioAutoAdjust=1"
Note: If a setting has been set for both ZConfig and ZRecommend, ZConfig will still lock the setting, and can not be changed by the user.
Intune deployment
- Log in to Microsoft Intune.
- Click Client apps.
- Click Apps.
- Click Add.
- For App type, select Line-of-business app, then click Select.
- Click Select app package file.
- Click Select a file, and choose the ZoomInstallFull.msi.
- Click OK.
- In the App information tab enter the following:
- Description- Enter the description of the app, i.e Zoom Meeting app.
- Publisher- Enter Zoom Video Communications.
- App install context- Click Device.
- Command-line arguments- Enter any MSI installation switches
- For enabling default settings that need to be locked, begin each setting switch with ZConfig. Ex. ZConfig=”nogoogle=1”.
- For enabling default settings, that users can change, begin each setting switch with ZRecommend. Ex. ZRecommend=”AudioAutoAdjust=1”.
- Click Next.
- Add any desired Scope tags.
- Click Next.
- Set if the app is required for any specific user groups, all users, and/or all devices.
- Click Next.
- Review the deployment summary, then click Create.
Configuration options
General settings
| Description | Default | MSI option and value |
| Disable Google login option | Disabled | nogoogle, 1 |
| Disable Facebook login option | Disabled | nofacebook, 1 |
| Disable Email login option | Disabled | DisableLoginWithEmail, 1 |
| Disables logging in via SSO | Disabled | nosso, 1 |
| Set and lock the default SSO URL for a client login | Disabled | ForceSSOUrl, your_company |
| Disable UAC prompt when logging into Zoom | Disabled | AddFWException, 1 |
| Minimize Zoom to system tray | Disabled | min2tray, 1 |
| Set the email address domain that users can login with | Disabled | login_domain, domain |
| Set account IDs that client is restricted to join a meeting hosted by specific Account ID numbers | Disabled | account, your_account_id |
| This will keep the user signed into the client when it is restarted | Disabled | KeepSignedIn, 1 |
| Sets the web domain for logging in or joining a meeting, by default the values is https://zoom.us or https://zoom.com | Disabled | SetWebDomain, domain |
| Default to Portrait Mode upon opening Zoom | Disabled | DefaultUsePortraitView, 1 |
| Adds the option to specify whether to share sound when screen sharing to a Zoom Room | Enabled | PresentToRoomWithAudio, 1 |
| Displays the "Call Room System" button on the home screen of the Zoom app | Disabled | EnableStartMeetingWithRoomSystem, 1 |
| If enabled the Zoom app will display the caller name for Room system | Disabled | AppendCallerNameForRoomSystem, 1 |
| Enables HID control of USB devices by the Zoom client | Enabled | EnableHIDControl, 1 |
|
If enabled, the client will use the following ports for media transmission: AUDIO: 8803 |
Disabled | EnableIndependentDataPort, 1 |
|
Uses embed browser in the Windows client for SSO |
Disabled | EnableEmbedBrowserForSSO, 1 |
|
Forces users to be signed in before joining a meeting from the app |
Disabled | EnforceSignInToJoin, 1 |
|
Automatically send logs, when there is a critical-failure issue |
Disabled | EnableAutoUploadDumps, 1 |
|
If enabled, the Zoom app will start an elevated video process to support advanced DSCP marks |
Disabled | EnableElevateForAdvDSCP, 1 |
|
Disables audio traffic over proxies |
Disabled | DisableAudioOverproxy, 1 |
|
Disables video traffic over proxies |
Disabled | DisableVideoOverproxy, 1 |
|
Disables screen sharing traffic over proxies |
Disabled | DisableSharingOverproxy, 1 |
|
Set a proxy server for the client as named proxy. Example: server:port |
Disabled | Proxy, proxy_address |
| Set proxy server to client with PAC URL | Disabled | ProxyPac, your_pac_url |
| Set proxy bypass rule for the client | Disabled | ProxyBypass, bypass_rule |
| Disables the Zoom Sharing service during install | Disabled | DisableAdvancedSharingService, 1 |
Meeting settings
| Description | Default | MSI option and value |
| Turn Off Camera when Joining a Meeting | Disabled | see ZConfig options below |
| Automatically join VoIP | Disabled | see ZConfig options below |
| Automatically enable dual monitor | Disabled | UseDualMonitor, 1 |
| Disable Full Screen when starting or joining a meeting | Disabled | FullScreenWhenJoin, 0 |
| Always show meeting controls (Disable auto-hide toolbar) | Disabled | AutoHideToolbar, 0 |
| Hide non-video participants by default | Disabled | HideNonVideoUsers, 1 |
| Always mute microphone when joining a meeting | Disabled | MuteVoipWhenJoin, 1 |
| Show the length of time that the user has been in a meeting | Disabled | ShowConnectedTime, 1 |
| Confirm before leaving a meeting | Enabled | ConfirmWhenLeave, 1 |
| Disable Screen Share when starting or joining a meeting | Disabled | DisableScreenShare, 1 |
| Disable Window's Aero Mode on Windows 7 | Disabled | noaeroonwin7, 1 |
| Set the default recording location for local recordings | Documents folder | recordpath, C:/your_recording_path |
| Only allow joining meetings within the specified account | Disabled | account, your account ID |
| Automatically adjust microphone settings | Disabled | AudioAutoAdjust, 1 |
| Enables echo cancellation when sending audio | Enabled | EnableEchoCancellation, 1 |
| Automatically enables the Orginal Audio setting for the microphone | Disabled | enableoriginalsound, 1 |
| Always use PMI for instant meetings | Disabled | UsePMI, 1 |
| Disable in-meeting chat | Disabled | zDisableChat, 1 |
|
Disable in-meeting file transfer (sending or receiving files) |
Disabled | zDisableFT, 1 |
| Disable local recording | Disabled | zDisableLocalRecord, 1 |
| Disable cloud recording | Disabled | zDisableCMR, 1 |
| Disable sending video | Disabled | zDisableSendVideo, 1 |
| Disable receiving video | Disabled | zDisableRecvVideo, 1 |
| Disables send and receiving of video | Disabled | zDisableVideo, 1 |
| Enable mirroring of shared video | Disabled | EnableMirrorEffect, 1 |
| Call CRC devices without starting a meeting first | Disabled | EnableStartMeetingWithRoomSyst |
| Set maximum sending bandwidth | Disabled |
BandwidthLimitUp, amount (all values in Kbps) |
| Set maximum receiving bandwidth | Disabled | BandwidthLimitDown, amount (all values in Kbps) |
|
Split traffic across different ports for easier identification |
Disabled | EnableIndependentDataPort, 1 |
|
Always show the video preview when joining a meeting |
Enabled | AlwaysShowVideoPreviewDialog, 1 |
|
Remove Computer Audio from the Audio Options |
Disabled | disablecomputeraudio, 1 |
|
Automatically mutes the microphone, when the screen is locked while in-meeting |
Disabled | MuteWhenLockScreen, 1 |
|
When enabled, Zoom will use the default speaker set in Windows |
Disabled | SetUseSystemDefaultSpeakerForVoip, 1 |
|
When enabled, Zoom will use the default microphone set in Windows |
Disabled | SetUseSystemDefaultMicForVoip, 1 |
|
Use Side-by-Side Mode for Viewing a Shared Screen |
Disabled | EnableSplitScreen, 1 |
|
Enable Automatically Adjust Volume |
Enabled | AudioAutoAdjust, 1 |
|
Disable Remote Control |
Disabled | DisableRemoteControl, 1 |
|
Disable Remote Support |
Disabled | DisableRemoteSupport, 1 |
|
Disable Virtual Background |
Disabled | DisableVirtualBkgnd, 1 |
|
Disable GPU Acceleration |
Disabled | LegacyCaptureMode, 1 |
|
Always show video preview dialog when joining a video meeting |
Enabled | AlwaysShowVideoPreviewDialog, 1 |
|
Disable whiteboard feature |
Disabled | DisableWhiteBoard, 1 |
|
Disables the option to share Desktop when screen sharing |
Disabled | DisableDesktopShare, 1 |
| Disables direct share with Zoom Rooms option | Disabled | DisableDirectShare, 1 |
| Allows enabling Optimize for full-screen video when sharing | Enabled | EnableShareVideo, 1 |
| Enables share computer audio feature | Enabled | EnableShareAudio, 1 |
| Enables showing Zoom windows, when screen sharing desktops | Disabled | ShowZoomWinWhenSharing, 1 |
Chat settings
| Description | Default | MSI option and value |
| Disable Link Preview | Disabled | zDisableIMLinkPreview, 1 |
| Disables file-transfer for group chats | Disabled | zDisableFT, 1 |
Other parameters
Meeting Options: Disabled by default. To require these settings, append ZConfig="kCmdParam_InstallOption=X". X represents a numeric value.
The values and options enabled are as follows:
| Value | Option |
| 1 | Turn Off Camera when Joining a Meeting |
| 2 | Automatically Join VoIP |
| 4 | Automatically enable dual monitor |
| 8 | Default to login with SSO |
| 16 | Automatically enter full screen when viewing shared content |
| 32 | Automatically fit to window when viewing shared content |
| 64 | Enable 720p by default |
| 128 | Remote control all applications |
To enable multiple settings, add the values. For example, to enable Automatically Join VoIP (2) AND 720p by default (64), set the ZoomInstall option to 66:
msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZConfig="kCmdParam_InstallOption=66"
Other options: please see http://msdn.microsoft.com/en-us/library/windows/desktop/aa367988(v=vs.85).aspx
Uninstall: To uninstall Zoom completely please use the following uninstaller.
Configuration Options for Zoom Rooms for Windows
| Description | Default | MSI option and value |
| Verify SSL certificate | Disabled | EnableSSLVerification |
| Automatically accept the GDPR license | Disabled | ACCEPTGDPR |
| Install updates silently without displaying progress bar | Disabled | SILENT |
| Automatically login with username and password | Enabled | SYSTEMAUTOLOGIN |
Silent Install with Auto login and Silent Updates: msiexec /i ZoomRoomsInstaller.msi /quiet ACCEPTGDPR=true SILENT=true SYSTEMAUTOLOGIN=true SYSTEMUSERNAME= "windows user name" SYSTEMPASSWORD= "windows password"
System Options
These options are disabled by default. To enable, append SYSTEMOPTION=X (X represents a numeric value. The values and options are as follows):
| Value | Option |
| 1 | Automatically lock the screen |
| 2 | Disable password upon wakeup |
| 4 | Disable Cortana |
| 8 | Disable notifications |
| 16 | Disable Windows updates |
| 32 | Enable High Performance Power |
| 64 | Disable Hibernation |
| 128 | Never Sleep |
| 256 | Never Turn Off Display |
Active Directory Administrative Template configuration
For a break down of the policies and options available for configuration, please see our list of available Group Policies and templates.
