Note: As our world comes together to slow the spread of COVID-19 pandemic, the Zoom Support Center has continued to operate 24x7 globally to support you. Please see the updated Support Guidelines during these unprecedented times.



Mass Installation and Configuration for Windows Follow

Overview

The Zoom Desktop Client can be mass configured for Windows in 3 different ways: via the MSI installer for both configuration and installation, an Active Directory administrative template utilizing Group Policy for configuration, or via registry keys for configuration.

Zoom Rooms for Windows can also be configured with an Active Directory administrative template utilizing Group Policy or registry keys.

If utilizing the MSI installer, Zoom can be deployed via GPO or SCCM. If installing the client via GPO script, install using a startup script for the desktop client. If you also want to deploy the Outlook plugin via GPO script, install using a logon script.

Installing with an Active Directory Administrative Template or registry keys, administrators can lock certain features and settings upon deployment of Zoom. 

Note: MSI installations require elevated administrative rights. 

This article covers:

Learn to install Zoom with preconfigured settings for Mac.

Prerequisites

Note: Some of the switches listed below require the latest version of the Zoom IT Installer.

Downloading the MSI Installer

Go to Download Center, and click on Download for IT Admin; or directly from https://www.zoom.us/client/latest/ZoomInstallerFull.msi

Priority of Settings

Settings can be configured in multiple places. Some can only be configured by the Zoom Admin or IT Admin and some can be configured by the end user. If settings conflict, Zoom will use the following priority:

  • Setting deployed via MSI/GPO with ZConfig
  • Web setting locked for the account or group
  • Client setting selected by the user
  • Setting deployed via MSI/GPO with ZRecommend
  • Web setting that are not locked

 

Deploying and Configuring the Zoom Desktop Client

Command-line deployment

Install: msiexec /package ZoomInstallerFull.msi /lex zoommsi.log

Silent install: msiexec /i ZoomInstallerFull.msi /quiet /qn /norestart /log install.log

Wait until in-progress meeting ends before installing:  msiexec /i ZoomInstallerFull.msi /norestart MSIRESTARTMANAGERCONTROL=”Disable”

Auto-update: Disabled by default, and will not allow users to install updates for the Zoom client. If auto-update is enabled, users will not require elevated admin rights to update when prompted. To enable (allow users to update the Zoom client), append ZoomAutoUpdate="true" to your install choice:

msiexec /package  ZoomInstallerFull. msi /lex zoommsi.log ZoomAutoUpdate="true"

Note: the VDI client will not respond to the auto-update switch.

Auto-start with Windows*: Disabled by default. To enable, append ZoomAutoStart="true" to the end of your install choice:

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZoomAutoStart="true"

Auto-start Silently with Windows*: Disabled by default. To enable, append ZSILENTSTART="true" to the end of your install choice:

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZSILENTSTART="true"

Do not create Desktop Shortcut: Disabled by default. To enable, append ZNoDesktopShortCut="true" to the end of your install choice:

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZNoDesktopShortCut="true"

Preconfigure SSO URL: Disabled by default. To enable, append ZSSOHOST="your_company". So full SSO endpoints such as https://your_company.zoom.us , the input can be:

  • your_company
  • https://your_company
  • your_company.zoom.us

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZSSOHOST="your_company"

Additional Configuration Options - ZConfig: To enable additional options, append the ZConfig parameter to the end of your install choice. Separate multiple options by ';':

msiexec /package ZoomInstaller.msi /norestart /lex msi.log ZConfig="account=your_account_id;nogoogle=1;nofacebook=1;login_domain=yourcompany.com&yourcompany2.com"

Additional options for ZConfig are listed in the table below.

Allow users to change settings: to deploy settings but allow users to change them within the Zoom desktop client, deploy with "ZRecommend" instead of "ZConfig". For example, msiexec /i ZoomInstallerFull.msi ZRecommend="AudioAutoAdjust=1"  

If you want to force certain settings, but allow users to change other default settings, use both ZConfig and ZRecommend . For example, msiexec /i ZoomInstallerFull.msi  ZConfig="nogoogle=1" ZRecommend="AudioAutoAdjust=1" 

Note: If a setting has been set for both ZConfig and ZRecommend, ZConfig will still lock the setting, and can not be changed by the user. 

Intune deployment

  1. Log in to Microsoft Intune.
  2. Click Client apps.
  3. Click Apps.
  4. Click Add.
  5. For App type, select Line-of-business app, then click Select.
  6. Click Select app package file.
  7. Click Select a file, and choose the ZoomInstallFull.msi. 
  8. Click OK.
  9. In the App information tab enter the following:
    • Description- Enter the description of the app, i.e Zoom Meeting app.
    • Publisher- Enter Zoom Video Communications.
    • App install context- Click Device.
    • Command-line arguments- Enter any MSI installation switches
      • For enabling default settings that need to be locked, begin each setting switch with ZConfig. Ex. ZConfig=”nogoogle=1”.
      • For enabling default settings, that users can change, begin each setting switch with ZRecommend. Ex. ZRecommend=”AudioAutoAdjust=1”.
  10. Click Next.
  11. Add any desired Scope tags.
  12. Click Next.
  13. Set if the app is required for any specific user groups, all users, and/or all devices.
  14. Click Next.
  15. Review the deployment summary, then click Create.

Configuration options

General settings

Description Default MSI option and value
Disable Google login option Disabled  nogoogle, 1
Disable Facebook login option Disabled  nofacebook, 1
Disable Email login option Disabled  DisableLoginWithEmail, 1
Disables logging in via SSO Disabled nosso, 1
Set and lock the default SSO URL for a client login Disabled ForceSSOUrl, your_company
Defaults login to use SSO Disabled AutoSSOLogin, 1
Disable UAC prompt when logging into Zoom Disabled  AddFWException, 1
Minimize Zoom to system tray Disabled min2tray, 1
Set the email address domain that users can login with Disabled  login_domain, domain 
Set account IDs that client is restricted to join a meeting hosted by specific Account ID numbers Disabled account, your_account_id
This will keep the user signed into the client when it is restarted Disabled KeepSignedIn, 1
Zoom client will automatically open and after a system reboot. Disabled AutoStartAfterReboot,1
Zoom client will start in the system tray after a reboot. Disabled AutoStartInSystemTray, 1
Sets the web domain for logging in or joining a meeting, by default the values is https://zoom.us or https://zoom.com Disabled SetWebDomain, domain
Default to Portrait Mode upon opening Zoom Disabled DefaultUsePortraitView, 1
Adds the option to specify whether to share sound when screen sharing to a Zoom Room Enabled PresentToRoomWithAudio, 1
Displays the "Call Room System" button on the home screen of the Zoom app Disabled EnableStartMeetingWithRoomSystem, 1
If enabled the Zoom app will display the caller name for Room system Disabled AppendCallerNameForRoomSystem, 1
Enables HID control of USB devices by the Zoom client Enabled EnableHIDControl, 1

If enabled, the client will use the following ports for media transmission:

AUDIO: 8803
AS: 8802
VIDEO: 8801

Disabled EnableIndependentDataPort, 1

Uses embed browser in the Windows client for SSO

Disabled EnableEmbedBrowserForSSO, 1

Forces users to be signed in before joining a meeting from the app

Disabled EnforceSignInToJoin, 1

Automatically send logs, when there is a critical-failure issue

Disabled EnableAutoUploadDumps, 1

Show Zoom contact status in Outlook, and sets Zoom as the default chat, meeting, and phone app in Outlook.

Disabled IntegrateZoomWithOutlook, 1

Enable touch up my appearance

Disabled EnableFaceBeauty, 1

Remote control all applications

Disabled RemoteControlAllApp, 1

If enabled, the Zoom app will start an elevated video process to support advanced DSCP marks

Disabled EnableElevateForAdvDSCP, 1

When enabled, screen share traffic is sent over TCP instead of UDP.

Disabled ShareSessionDisableUDP, 1

Disables audio traffic over proxies

Disabled DisableAudioOverproxy, 1

Disables video traffic over proxies

Disabled DisableVideoOverproxy, 1

Disables screen sharing traffic over proxies

Disabled DisableSharingOverproxy, 1

Set a proxy server for the client as named proxy.

Example: server: port

Disabled Proxy, proxy_address
Set proxy server to client with PAC URL Disabled ProxyPac, your_pac_url
Set proxy bypass rule for the client Disabled ProxyBypass, bypass_rule
Sets the inbound firewall rules for the Zoom client (starting endpoint of the interval)*  Disabled FirewallPortStart, range_open_port
Sets the inbound firewall rules for the Zoom client (ending endpoint of the interval)* Disabled FirewallPortEnd, range_close_port
If enabled, removes noise from video feeds when processing. Disabled EnableTemporalDeNoise, 1
Enables hardware acceleration for video processing. Disabled EnableGPUComputeUtilization
Enables hardware acceleration for video processing, when sending video. Disabled EnableHardwareAccForVideoSend
Enables hardware acceleration for video processing, when receiving video. Disabled EnableHardwareAccForVideoReceive

*Note: FirewallPortStart and FirewallPortEnd need to be configured together, Zoom does not recommend enabling one without enabling the other. 

Meeting settings

Description Default MSI option and value
Turn Off Camera when Joining a Meeting Disabled Disablevideo, 1
When joining a meeting, the meeting window launches in a fullscreen window by default Disabled AutoFullScreenWhenViewShare, 1
Automatically adjusts screen share content to fit the viewer's screen Disabled AutoFitWhenViewShare, 1
Use HD video when joining a meeting Disabled Use720pByDefault, 1
Automatically enable dual monitor Disabled  UseDualMonitor, 1
Disable Full Screen when starting or joining a meeting Disabled FullScreenWhenJoin, 0
Always show meeting controls (Disable auto-hide toolbar) Disabled AutoHideToolbar, 0
Hide non-video participants by default Disabled HideNonVideoUsers, 1
Always mute microphone when joining a meeting Disabled  MuteVoipWhenJoin, 1
Auto-connect audio with VoIP when joining a meeting Disabled AutoJoinVOIP, 1
Show the length of time that the user has been in a meeting Disabled  ShowConnectedTime, 1
Confirm before leaving a meeting Enabled  ConfirmWhenLeave, 1
Disable Screen Share when starting or joining a meeting Disabled  DisableScreenShare, 1
Disable Window's Aero Mode on Windows 7 Disabled noaeroonwin7, 1
Set the default recording location for local recordings Documents folder recordpath, C:/your_recording_path
Only allow joining meetings within the specified account Disabled account, your account ID
Automatically adjust microphone settings Disabled AudioAutoAdjust, 1
Enables echo cancellation when sending audio  Enabled EnableEchoCancellation, 1
Automatically enables the Orginal Audio setting for the microphone Disabled enableoriginalsound, 1
Always use PMI for instant meetings Disabled UsePMI, 1
Disable in-meeting chat Disabled zDisableChat, 1

Disable in-meeting file transfer (sending or receiving files)

Disabled zDisableFT, 1
Disable local recording Disabled zDisableLocalRecord, 1
Disable cloud recording Disabled zDisableCMR, 1
Disable sending video Disabled zDisableSendVideo, 1
Disable receiving video Disabled zDisableRecvVideo, 1
Disables send and receiving of video Disabled zDisableVideo, 1
Enable mirroring of shared video Disabled EnableMirrorEffect, 1
Call CRC devices without starting a meeting first Disabled EnableStartMeetingWithRoomSyst em, 1
Set maximum sending bandwidth Disabled

BandwidthLimitUp, amount (all values in Kbps)

Set maximum receiving bandwidth  Disabled BandwidthLimitDown, amount (all values in Kbps)

Split traffic across different ports for easier identification
Video share: 8801
Screensharing: 8802
Audio: 8803

Disabled EnableIndependentDataPort, 1

Always show the video preview when joining a meeting

Enabled AlwaysShowVideoPreviewDialog, 1

Remove Computer Audio from the Audio Options 

Disabled disablecomputeraudio, 1

Automatically mutes the microphone, when the screen is locked while in-meeting

Disabled MuteWhenLockScreen, 1

When enabled, Zoom will use the default speaker set in Windows

Disabled SetUseSystemDefaultSpeakerForVoip, 1

When enabled, Zoom will use the default microphone set in Windows

Disabled SetUseSystemDefaultMicForVoip, 1

Use Side-by-Side Mode for Viewing a Shared Screen 

Disabled  EnableSplitScreen, 1

Enable Automatically Adjust Volume

Enabled AudioAutoAdjust, 1

Disable Remote Control

Disabled DisableRemoteControl, 1

Disable Remote Support

Disabled DisableRemoteSupport, 1

Disable Virtual Background

Disabled DisableVirtualBkgnd, 1

Disable GPU Acceleration

Disabled LegacyCaptureMode, 1

Always show video preview dialog when joining a video meeting

Enabled AlwaysShowVideoPreviewDialog, 1

Disable whiteboard feature

Disabled DisableWhiteBoard, 1

Disables the option to share Desktop when screen sharing

Disabled DisableDesktopShare, 1
Disables direct share with Zoom Rooms option  Disabled DisableDirectShare, 1
Allows enabling Optimize for full-screen video when sharing Enabled EnableShareVideo, 1
Enables share computer audio feature Enabled EnableShareAudio, 1
Enables showing Zoom windows, when screen sharing desktops Disabled ShowZoomWinWhenSharing, 1
Enables spotlight of your video when speaking Disabled

EnableSpotlightSelf, 1

Enables Gallery View to display up to 49 participants per screen Disabled Enable49video, 1
Enables a reminder for upcoming meetings Disabled EnableRemindMeetingTime, 1

Sets the specified video rendering method using the following string variables:

0 - Auto
1 - Direct3D11 Flip Mode
2 - Direct3D11
3 - Direct3D9
4 - GDI

0 (Auto) VideoRenderMethod, 0

 

Chat settings

Description Default MSI option and value
Disable Link Preview Disabled zDisableIMLinkPreview, 1
Move messages with new replies to the bottom of the chat/channel Disabled SetMessengerDoNotDropThread, 1

 

 

Other options: please see http://msdn.microsoft.com/en-us/library/windows/desktop/aa367988(v=vs.85).aspx

Uninstall switches

To uninstall Zoom completely please use the following uninstaller. The following switches are available when running the installer:

Command Function
/slient Removes Zoom silently
/keep_outlook_plugin Removes Zoom, but leaves the Outlook Plugin installed
/keep_lync_plugin Removes Zoom, but leaves the Lync/Skype for Business Plugin installed
/keep_notes_plugin Removes Zoom, but leaves the Notes Plugin installed
/vdi_clean Removes the vdi package

Configuration Options for Zoom Rooms for Windows

Description Default MSI option and value
Verify SSL certificate Disabled EnableSSLVerification
Automatically accept the GDPR license Disabled ACCEPTGDPR
Install updates silently without displaying progress bar Disabled SILENT
Automatically login with username and password Enabled SYSTEMAUTOLOGIN

 

Silent Install with Auto login and Silent Updates: msiexec /i ZoomRoomsInstaller.msi /quiet  ACCEPTGDPR=true SILENT=true SYSTEMAUTOLOGIN=true SYSTEMUSERNAME= "windows user name" SYSTEMPASSWORD= "windows password"

System Options

These options are disabled by default. To enable, append SYSTEMOPTION=X  (X represents a numeric value. The values and options are as follows):

Value Option
1 Automatically lock the screen
2 Disable password upon wakeup
4 Disable Cortana
8 Disable notifications
16 Disable Windows updates
32 Enable High Performance Power
64 Disable Hibernation
128 Never Sleep
256 Never Turn Off Display

 

Active Directory Administrative Template configuration

For a break down of the policies and options available for configuration, please see our list of available Group Policies and templates.