Mass Installation and Configuration for Windows Follow


The Zoom Desktop Client can be mass configured for Windows in 3 different ways: via the MSI installer for both configuration and installation, an Active Directory administrative template utilizing Group Policy for configuration, or via registry keys for configuration.

Zoom Rooms for Windows can also be configured with an Active Directory administrative template utilizing Group Policy or registry keys.

If utilizing the MSI installer, Zoom can be deployed via GPO or SCCM. If installing the client via GPO script, install using a startup script for the desktop client. If you also want to deploy the Outlook plugin via GPO script, install using a logon script.

Installing with an Active Directory Administrative Template or registry keys, administrators can lock certain features and settings upon deployment of Zoom. Administrators can disable features such as screen sharing or video sharing for all meetings that user joins, regardless of who is hosting the meeting. Active Directory admins can configure Zoom settings and features through Group Policy at any time. Zoom does not need to be installed on the computer for these settings to be configured. Zoom can be downloaded at a later time and the configuration will apply the first time Zoom is launched. The settings apply whether the standard installer is used or the MSI installer is used.

This article covers:

Learn to install Zoom with preconfigured settings for Mac.


Downloading the MSI Installer

Go to Download Center, and click on Download for IT Admin; or directly from

Priority of Settings

Settings can be configured in multiple places. Some can only be configured by the Zoom Admin or IT Admin and some can be configured by the end user. If settings conflict, Zoom will use the following priority:

  • Setting deployed via MSI/GPO with ZConfig
  • Web setting locked for the account or group
  • Client setting selected by the user
  • Setting deployed via MSI/GPO with ZRecommend
  • Web setting that are not locked

Configuring with the Active Directory Administrative Template

  1. Login to your Active Directory server as an admin.
  2. Click Start, choose Administrative Tools, then Active Directory Users and Computers.
  3. Expand the domain where you would like to set the group policy.
  4. Right-click on the domain where you would like to set the group policy, click Properties, then Group Policy.
  5. Create a Group Policy Object and name it Zoom.
  6. Select the newly created Group Policy Object and click Edit.
  7. Under the Computer Configuration, right click on Administrative Templates.
  8. Choose Add/Remove Templates.
  9. Browse and find the Administrative Template downloaded from this article. Click Open.
  10. Close the Add/Remove Templates window.
  11. Under Computer Configuration then Administrative Templates, you should now have the option for Zoom.
  12. Double click on the Zoom folder to open a list of subfolders: General Settings, Chat Settings, and Meeting Settings.
  13. Double click on one of the subfolders to view settings and double click on the individual setting to view more information and enable or disable it.

For a break down of the policies and options available for configuration, please see our list of available Group Policies and templates.

Configuration Options for the Zoom Desktop Client

Install: msiexec /package ZoomInstallerFull.msi /lex zoommsi.log

Silent install: msiexec /i ZoomInstallerFull.msi /quiet /qn /norestart /log install.log

Wait until in-progress meeting ends before installing:  msiexec /i ZoomInstallerFull.msi /norestart MSIRESTARTMANAGERCONTROL=”Disable”

Auto-update: Disabled by default. To enable, append ZoomAutoUpdate="true" to your install choice:

msiexec /package  ZoomInstallerFull. msi /lex zoommsi.log ZoomAutoUpdate="true"

Auto-start with Windows*: Disabled by default. To enable, append ZoomAutoStart="true" to the end of your install choice:

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZoomAutoStart="true"

Auto-start Silently with Windows*: Disabled by default. To enable, append ZSILENTSTART="true" to the end of your install choice:

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZSILENTSTART="true"

Do not create Desktop Shortcut: Disabled by default. To enable, append ZNoDesktopShortCut="true" to the end of your install choice:

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZNoDesktopShortCut="true"

Preconfigure SSO URL: Disabled by default. To enable, append ZSSOHOST="your_company". So full SSO endpoints such as , the input can be:

  • your_company
  • https://your_company

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZSSOHOST="your_company"

Additional Configuration Options - ZConfig: To enable additional options, append the ZConfig parameter to the end of your install choice. Separate multiple options by ';':

msiexec /package ZoomInstaller.msi /norestart /lex msi.log ZConfig="account=your_account_id;nogoogle=1;nofacebook=1;"

Additional options for ZConfig are listed in the table below.

Allow users to change settings: to deploy settings but allow users to change them within the Zoom desktop client, deploy with "ZRecommend" instead of "ZConfig". For example, msiexec /i ZoomInstallerFull.msi ZRecommend="AudioAutoAdjust=1"  

If you want to force certain settings, but allow users to change other default settings, use both ZConfig and ZRecommend . For example, msiexec /i ZoomInstallerFull.msi  ZConfig="nogoogle=1" ZRecommend="AudioAutoAdjust=1" 

Note: If a setting has been set for both ZConfig and ZRecommend, ZConfig will still lock the setting, and can not be changed by the user. 

General Settings

Description Default MSI option and value
Disable Google login option Disabled  nogoogle, 1
Disable Facebook login option Disabled  nofacebook, 1
Disable Email login option Disabled  DisableLoginWithEmail, 1
Disable UAC prompt when logging into Zoom Disabled  AddFWException, 1
Minimize Zoom to system tray  Disabled min2tray, 1
Set the email address domain that users can login with Disabled  login_domain, domain 
Default to Portrait Mode upon opening Zoom Disabled DefaultUsePortraitView, 1


Meeting Settings

Description Default MSI option and value
Turn Off Camera when Joining a Meeting Disabled  see ZConfig options below
Automatically join VoIP Disabled see ZConfig options below
Automatically enable dual monitor Disabled  UseDualMonitor, 1
Disable Full Screen when starting or joining a meeting Disabled FullScreenWhenJoin, 0
Always show meeting controls (Disable auto-hide toolbar) Disabled AutoHideToolbar, 0
Hide non-video participants by default Disabled HideNonVideoUsers, 1
Always mute microphone when joining a meeting Disabled  MuteVoipWhenJoin, 1
Show the length of time that the user has been in a meeting Disabled  ShowConnectedTime, 1
Confirm before leaving a meeting Enabled  ConfirmWhenLeave, 1
Disable Screen Share when starting or joining a meeting Disabled  DisableScreenShare, 1
Disable Window's Aero Mode on Windows 7 Disabled noaeroonwin7, 1
Set the default recording location for local recordings Documents folder recordpath, C:/your_recording_path
Only allow joining meetings within the specified account Disabled account, your account ID
Automatically adjust microphone settings Disabled AudioAutoAdjust, 1
Always use PMI for instant meetings Disabled UsePMI, 1
Disable in-meeting chat Disabled zDisableChat, 1

Disable in-meeting file transfer (sending or receiving files)

Disabled zDisableFT, 1
Disable local recording Disabled zDisableLocalRecord, 1
Disable cloud recording Disabled zDisableCMR, 1
Disable sending video Disabled zDisableSendVideo, 1
Disable receiving video Disabled zDisableRecvVideo, 1
Enable mirroring of shared video Disabled EnableMirrorEffect, 1
Call CRC devices without starting a meeting first Disabled EnableStartMeetingWithRoomSyst em, 1
Set maximum sending bandwidth Disabled

BandwidthLimitUp, amount (all values in Kbps)

Set maximum receiving bandwidth  Disabled BandwidthLimitDown, amount (all values in Kbps)

Split traffic across different ports for easier identification
Video share: 8801
Screensharing: 8802
Audio: 8803

Disabled EnableIndependentDataPort, 1

Always show the video preview when joining a meeting

Enabled AlwaysShowVideoPreviewDialog, 1

Remove Computer Audio from the Audio Options 

Disabled disablecomputeraudio, 1

Use Side-by-Side Mode for Viewing a Shared Screen 

Disabled  EnableSplitScreen, 1

Enable Automatically Adjust Volume

Enabled AudioAutoAdjust, 1

Disable Remote Control

Disabled DisableRemoteControl, 1

Disable Remote Support

Disabled DisableRemoteSupport, 1

Disable Virtual Background

Disabled DisableVirtualBkgnd, 1

Disable GPU Acceleration

Disabled LegacyCaptureMode, 1


Chat Settings

Description Default MSI option and value
Disable Link Preview Disabled zDisableIMLinkPreview, 1

*Users will not have the ability to change these settings in their Zoom client. It will be dependent on what option the admin selects when installing via MSI.

Meeting Options: Disabled by default. To require these settings, append ZConfig="kCmdParam_InstallOption=X". X represents a numeric value. 

The values and options enabled are as follows:

Value Option
1 Turn Off Camera when Joining a Meeting
2 Automatically Join VoIP
4 Automatically enable dual monitor
8 Default to login with SSO
16 Automatically enter full screen when viewing shared content
32 Automatically fit to window when viewing shared content
64 Enable 720p by default
128 Remote control all applications 

To enable multiple settings, add the values. For example, to enable Automatically Join VoIP (2) AND 720p by default (64), set the ZoomInstall option to 66:

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZConfig="kCmdParam_InstallOption=66"

Other options: please see

Uninstall: To uninstall Zoom completely please use the following uninstaller. There is an option to keep user data. If you want to save user data, run as "CleanZoom.exe /keepdata"

Configuration Options for Zoom Rooms for Windows

Description Default MSI option and value
Verify SSL certificate Disabled EnableSSLVerification
Automatically accept the GDPR license Disabled ACCEPTGDPR
Install updates silently without displaying progress bar Disabled SILENT
Automatically login with username and password Enabled SYSTEMAUTOLOGIN


Silent Install with Auto login and Silent Updates: msiexec /i ZoomRoomsInstaller.msi /quiet  ACCEPTGDPR=true SILENT=true SYSTEMAUTOLOGIN=true SYSTEMUSERNAME= "windows user name" SYSTEMPASSWORD= "windows password".

System Options

These options are disabled by default. To enable, append SYSTEMOPTION=X. X represents a numeric value. The values and options are as follows:

Value Option
1 Automatically lock the screen
2 Disable password upon wakeup
4 Disable Cortana
8 Disable notifications
16 Disable Windows updates
32 Enable High Performance Power
64 Disable Hibernation
128 Never Sleep
256 Never Turn Off Display



Was this article helpful?