Mass-deploying with preconfigured settings for Windows
Last Updated:
The Zoom desktop client can be installed and configured in bulk for Windows in three different ways: via the MSI installer for both configuration and installation, an Active Directory administrative template utilizing Group Policy for configuration, or via registry keys for configuration.
Zoom Rooms for Windows can also be configured with an Active Directory administrative template utilizing Group Policy or registry keys.
If utilizing the MSI installer, Zoom can be deployed via GPO or SCCM. If installing the client via GPO script, install using a startup script for the desktop client. If you also want to deploy the Outlook plugin via GPO script, install using a logon script.
Installing with an Active Directory Administrative Template or registry keys, administrators can lock certain features and settings upon deployment of Zoom.
The desktop client can be enrolled in and managed through Zoom Device Management, which allows you to centrally control desktop client and mobile app settings in the Zoom web portal.
Notes:
- MSI installations require elevated administrative rights.
- The VDI Host Installer is an MSI file type that can use the same switches as the standard client MSI installer. It can be deployed through normal software and device management tools. The VDI Client will respond to the same MSI configuration as the non-VDI client and can be configured accordingly.
This article covers:
- How to download the desktop client MSI installer
- Priority of settings
- How to deploy and configure the Zoom desktop client
- How to download the Zoom Room MSI installer
- Configuration options for Zoom Rooms for Windows
- Configuration options for the Outlook Plugin for Windows
- Active Directory Administrative Template configuration
Learn to install Zoom with preconfigured settings for macOS, for Android devices, and for iOS devices. You can also use Zoom’s own Device Management platform to centrally configure desktop client and mobile app settings.
Prerequisites for using the IT admin installer
- MSI version of the Windows desktop client
Note: Some of the switches listed below require the latest version of the Zoom IT Installer.
How to download the desktop client MSI installer
- Go to the Zoom Download Center
- Click on Download for IT Admin, and then click one of the following links under the Zoom Client for Meetings section:
- Download MSI: Download the latest 32-bit version of the MSI installer.
- Download 64-bit Client: Download the latest 64-bit version of the MSI installer.
- Download ARM Client: Download the latest version of the MSI installer for ARM devices
Priority of settings
Settings can be configured in multiple places. Some can only be configured by the Zoom Admin or IT Admin and some can be configured by the end user. If settings conflict, Zoom will use the following priority:
- Settings deployed and locked through ZDM.
- Setting deployed via MSI/GPO with zConfig.
- Web setting locked at the Account- or Group-level settings.
- Client setting selected by the user.
- Setting deployed via MSI/GPO with zRecommend.
- Web setting that are not locked.
How to deploy and configure the Zoom desktop client
Command-line deployment options
The following options are configured as part of the main command-line deployment of the desktop client. A basic install configuration is provided below, and each option afterwards is bolded in each corresponding example.
For other common installation options, please refer to the Microsoft article for MSI installations.
Note: Registry entries for the following settings will be located in the following locations:
- 32-bit version: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\ZoomUMX\
- 64-bit version: HKEY_LOCAL_MACHINE\SOFTWARE\ZoomUMX\
| MSI option | Description | Deployment example | Value type |
|---|---|---|---|
| Basic Install | Standard command-line install example | msiexec /package ZoomInstallerFull.msi /lex zoommsi.log | - |
| Silent install | Installs the client without user interaction, any install windows, or immediate restart | msiexec /i ZoomInstallerFull.msi /quiet /qn /norestart /log install.log | - |
| Wait until the in-progress meeting is over before installing | Disables interaction of the package with the Restart Manager, prevents an immediate restart, and hides all UI of the process. | msiexec /i ZoomInstallerFull.msi /qn /norestart MSIRestartManagerControl=Disable | Boolean |
| zNoDesktopShortCut | Prevent the creation of a desktop shortcut on install or update. | msiexec /package ZoomInstallerFull.msi /lex zoommsi.log zNoDesktopShortCut=True | Boolean |
| zSilentStart |
Automatically start client in the system tray after reboot. |
msiexec /package ZoomInstallerFull.msi /lex zoommsi.log zSilentStart=1 | Boolean |
| zSSOHost | Disabled by default, this option allows you to preconfigure the SSO URL. | msiexec /package ZoomInstallerFull.msi /lex zoommsi.log zSSOHost="vanity_URL" | String |
| ZoomAutoUpdate |
Disabled by default, this will remove the Check for Updates option in the client and thus not allow users to check for and install updates for the Zoom client. If Auto-update is enabled, users will be able to check for updates in the client and will not require elevated admin rights to update. |
msiexec /package ZoomInstallerFull. msi /lex zoommsi.log ZoomAutoUpdate=1 |
Boolean |
|
DisableAdvancedSharingService |
Disabled by default, this option can disable this service, which can prevent prompting for admin credentials during upgrading. If this service is disabled, the auto-updating experience may be affected slightly. |
msiexec /package ZoomInstallerFull.msi /lex zoommsi.logb DisableAdvancedSharingService=1 |
Boolean |
|
FirewallPortStart |
Set the inbound and outbound firewall rules for the Zoom client. Note: FirewallPortStart and FirewallPortEnd need to be configured together, as Zoom does not recommend enabling one without enabling the other. |
msiexec /package ZoomInstallerFull.msi /lex zoommsi.log FirewallPortStart="7200" FirewallPortEnd="17210" |
String |
|
AllowDowngrade |
By default, MSI installations* will not allow a lower version to be installed over the existing installation. This option allows this restriction to be bypassed. |
msiexec /i ZoomInstallerFull.msi AllowDowngrade=1 |
Boolean |
Important notes regarding AutoUpdate
The EnableSilentAutoUpdate or AlwaysCheckLatestVersion options are no longer supported.
Managing Auto Update on versions between 5.8.6 and 5.10.1 should be done with the ZoomAutoUpdate and SetUpdatingChannel option below. This allows for automatic download and installation of updates, based on Slow and Fast release cadences, to best suit your needs.
For versions 5.10.3 and higher, refer to the Enterprise Auto Update policies.
Additional Configuration Options
The following options must be included and configured within one of the following parameters:
- zConfig: To set and require specific configurations, append the zConfig parameter to the end of your install choice.
-
msiexec /package ZoomInstaller.msi /norestart /lex msi.log ZConfig="account=your_account_id;nogoogle=1;nofacebook=1”
-
- zRecommend: To set specific configurations as the default, but allow users to change them within the Zoom desktop client, deploy with zRecommend.
-
msiexec /i ZoomInstallerFull.msi ZRecommend="AudioAutoAdjust=1"
-
Multiple options can be configured in either, with each option and its corresponding value being separated from the next by a semicolon (;).
If you want to force certain settings, but allow users to change other settings you’ve set as default, use both zConfig and zRecommend. For example, this install configuration
-
msiexec /i ZoomInstallerFull.msi zConfig="nogoogle=1" zRecommend="AudioAutoAdjust=1"
disables the Google login method entirely on the client, while Auto-adjust audio is defaulted to “auto”, but can be disabled and manually set by the user.
Note: If a setting has been set in both zConfig and zRecommend, zConfig will take priority and lock the setting, which cannot be changed by the user. Refer to the Priority of Settings section to understand how other conflicting settings are resolved.
| MSI option | Description | Default state and value | Value type |
|---|---|---|---|
| Install and update | |||
| AutoStartAfterReboot | Automatically start Zoom when Windows starts. Note: Once deployed, the desktop client must be started manually once, before this policy will take effect on subsequent reboots. |
Disabled, 0 | Boolean |
| Min2Tray | Minimize Zoom to system tray when window is closed. Note: Once deployed, the desktop client must be started manually once, before this policy will take effect on subsequent reboots. |
Enabled, 1 | Boolean |
| SetUpdatingChannel | Control the cadence of updates applied to the desktop client on versions between 5.8.6 and 5.10.1: Slow (0): fewer updates and better stability. Fast (1): newest features and updates. Please see AutoUpdate note for important details. |
Slow (0) | Boolean |
| DisableUpdateTo64Bit | Control if the desktop client can upgrade to the 64-bit version upon update, if the 32-bit version is installed on a 64-bit system. | Disabled, 0 | Boolean |
| SetEnrollToken4CloudMDM, token | Enroll your device into Zoom Device Management with a token provided from the web portal. | Disabled, (empty) | String |
| kCmdParam_InstallOption |
The following options can be enabled and must be entered as the combined numeric value of all the options you want enabled as the string value: 1 - Turn off video when joining a meeting. 8 - Default login to SSO. 16 - Automatically enter full-screen when viewing shared content. 32 - Automatically fit to window when viewing shared content. 128 - Allow remote control of all applications. For example, to enable Automatically connect with computer audio (2) and HD video (64), set this option as "kCmdParam_InstallOption=66". |
Disabled, (empty) | String |
| AddFWException | Disable UAC prompt when logging into Zoom. | Enabled, 1 | Boolean |
| InstallVDIAutoUpdatePlugin |
When a VDI environment is detected, the ZoomPluginAutoUpdateService.dll is installed so that VDI auto-update is available for use. |
Enabled, 1 | Boolean |
| Network | |||
| EnableDiagnostic |
Controls the ability for the desktop client to access the Network Connectivity Tool, which allows a user to test their network connection with Zoom services. | Enabled, 1 | Boolean |
| BlockUntrustedSSLCert | Block connections to untrusted SSL certificates. | Enabled, 1 | Boolean |
| SetNoRevocationCheckUrls | Allow specific URLs to be trusted and bypass the untrusted certificate prompt if the certificate is revoked. Multiple domains should be separated by ";", for example "hooli.com;hooli.org". | Disabled, (empty) | String |
| DisableCertPin | Disable Certificate Pinning. | Disabled, 0 | Boolean |
| ProxyPac, your_pac_url | Set proxy server for desktop client with PAC URL. | Disabled, (empty) | String |
| ProxyServer, proxy_address | Set a proxy server for desktop client as named proxy. Example: server: port |
Disabled, (empty) | String |
| ProxyBypass, bypass_rule | Set proxy bypass rule for the desktop client. Each value should be separated by a ; | Disabled, (empty) | String |
| PreproxyDetectPolicy |
Controls the use of an admin-defined proxy pre-detection method, which can be faster for some PAC cases. If this option is not defined, the default Zoom proxy detection is used. Note: This option affects only Windows devices. |
Disabled, (empty) | String |
| DisableAudioOverProxy | Prevent audio traffic over proxies. | Disabled, 0 | Boolean |
| DisableVideoOverProxy | Prevent video traffic over proxies. | Disabled, 0 | Boolean |
| DisableSharingOverProxy | Prevent screen sharing traffic over proxies. | Disabled, 0 | Boolean |
| BandwidthLimitUp, amount | Set maximum sending bandwidth for the desktop client. Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. |
Disabled, (empty) |
String (all values in Kbps)
|
| BandwidthLimitDown, amount | Set maximum receiving bandwidth for the desktop client. Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. |
Disabled, (empty) |
String (all values in Kbps)
|
| IgnoreBandwidthLimits | Ignore bandwidth limit set on web settings. (Useful for exceptions to bandwidth restrictions) | Disabled, 0 | Boolean |
| EnableIndependentDataPort | If enabled, the client will use the following ports for media transmission: Audio: 8803 Screen share: 8802 Video: 8801 |
Disabled, 0 | Boolean |
| ShareSessionDisableUDP | Send screen share traffic over TCP, instead of UDP. | Disabled, 0 | Boolean |
| DisableDirectConnection2Web | Disable all direct connections to Zoom web service. | Disabled, 0 | Boolean |
| EnableWinExtendProtectedAuth |
Enable to Support Windows Extended Protection with NTLM authentication. | Disabled, 0 | Boolean |
| Authentication | |||
| NoFacebook | Remove Facebook login option. | Disabled, 0 | Boolean |
| NoGoogle | Remove Google login option. | Disabled, 0 | Boolean |
| EnableAppleLogin | Allow access to Apple login option. | Enabled, 1 | Boolean |
| NoSSO | Remove SSO login option. | Disabled, 0 | Boolean |
| DisableLoginWithEmail | Remove Email login option. | Disabled, 0 | Boolean |
| DisableKeepSignedInWithSSO | Require fresh SSO login upon client start. | Disabled, 0 | Boolean |
| DisableKeepSignedInWithGoogle | Require fresh Google login upon client start. | Disabled, 0 | Boolean |
| DisableKeepSignedInWithFacebook | Require fresh Facebook login upon client start. | Disabled, 0 | Boolean |
| KeepSignedIn | Keep the user signed in to the client when relaunched. (Email login only) |
Disabled, 0 | Boolean |
| AutoSSOLogin | Defaults login to SSO. | Disabled, 0 | Boolean |
| ForceSSOUrl=your_company | Set and lock the default SSO URL for SSO login. For example, hooli.zoom.us would be set as "ForceSSOUrl=hooli". |
Disabled, (empty) | String |
| EnableEmbedBrowserForSSO | Use embedded browser in the client for SSO. | Disabled, 0 | Boolean |
| SetWebDomain, domain | Sets the web domain for logging in or joining a meeting. By default, the value is https://zoom.us or https://zoom.com. |
Disabled, (empty) | String |
| DisableAutoLaunchSSO | Prevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL. | Disabled, 0 | Boolean |
| EnablePhoneLogin | Enables login with phone authentication. (A) | Disabled, 0 | Boolean |
| EnableAlipayLogin | Enables login with Alipay authentication. (A) | Disabled, 0 | Boolean |
| EnablQQLogin | Enables login with QQ authentication. (A) | Disabled, 0 | Boolean |
| EnableWeChatLogin | Enables login with WeChat authentication. (A) | Disabled, 0 | Boolean |
| Account, your_account_id | Restrict the client to only join meetings hosted by the specified account IDs. (B) | Disabled, (empty) | String |
| Login_Domain, domain | Set the email address domain that users can login with, each separated by "&". Example: zoom.us & hooli.com |
Disabled, (empty) | String |
| EnableCloudSwitch | Enable the option to switch between Zoom commercial (default) and Zoom for Gov. | Disabled, 0 | Boolean |
| EnforceSignInToJoin | Require users to be authenticated before joining a meeting with the desktop client. Authentication can take place through the the web portal, if joining through join URL. | Disabled, 0 | Boolean |
| EnforceAppSignInToJoin | Require authentication on the desktop client to join any meeting on the desktop client. | Disabled, 0 | Boolean |
| EnforceSignInToJoinForWebinar | Require users to be authenticated before joining a webinar with the desktop client. Authentication can take place through the the web portal, if joining through join URL. | Disabled, 0 | Boolean |
| EnforceAppSignInToJoinForWebinar | Require authentication on the desktop client to join any webinar on the desktop client. | Disabled, 0 | Boolean |
| SetDevicePolicyToken, device_token | Require internal meeting authentication. (C) | Disabled, (empty) | String |
| General meeting and client options | |||
| UseDualMonitor | Enable dual monitor mode. | Disabled, 0 | Boolean |
| FullScreenWhenJoin | When starting or joining a meeting, the meeting window will enter full-screen. | Disabled, 0 | Boolean |
| AutoHideToolbar | Set use of Always show meeting controls setting. | Enabled, 1 | Boolean |
| UsePMI | Always use PMI for instant meetings. | Disabled, 0 | Boolean |
| DefaultUsePortraitView | Default to Portrait Mode upon opening Zoom. | Disabled, 0 | Boolean |
| DisableClosedCaptioning | Disable the use of all closed captioning. | Disabled, 0 | Boolean |
| DisableManualClosedCaptioning | Disable the use of manual, user-entered captioning. | Disabled, 0 | Boolean |
| DisableQnA | Disable the use of Q&A in webinars. | Disabled, 0 | Boolean |
| DisableMeetingReactions | Disable the use of Meeting Reactions. | Disabled, 0 | Boolean |
| DisableNonVerbalFeedback | Disable the use of Non-verbal feedback. | Disabled, 0 | Boolean |
| DisableWebinarReactions |
Disable the use of Webinar Reactions. | Disabled, 0 | Boolean |
| DisableSideCar |
Disable the use of Webinar Resources, which allows webinar hosts with the ability to link to external resources, such as newsletter sign-ups, learn more pages, and others. | Disabled, 0 | Boolean |
|
DisableBroadcastBOMessage |
Disable the ability for the host to broadcast a message to all open breakout rooms. | Disabled, 0 | Boolean |
| ConfirmWhenLeave | Confirm before leaving a meeting. | Enabled, 1 | Boolean |
| ShowConnectedTime | Enable the Show Meeting Timers setting. This setting allows for viewing the current duration of the meeting, or the remaining time, based on scheduled duration. | Disabled, 0 | Boolean |
| MuteWhenLockScreen | Automatically mute the microphone and turn off video, when the screen is locked during a meeting. | Enabled, 1 | Boolean |
| EnableRemindMeetingTime | Display reminder notifications for upcoming meetings. | Disabled, 0 | Boolean |
| Video | |||
| zDisableRecvVideo | Disable receiving video. | Disabled, 0 | Boolean |
| zDisableSendVideo | Disable sending video. | Disabled, 0 | Boolean |
| DisableVideo | Automatically turn off camera when joining a meeting. | Disabled, 0 | Boolean |
| Use720pByDefault | Use HD video in meetings. | Disabled, 0 | Boolean |
| EnableMirrorEffect | Enable mirroring of your video. Mirror effect only affects your view of your video. | Enabled, 1 | Boolean |
|
HideSelfView |
Controls the use of the Hide Self View option. | Disabled, 0 | Boolean |
| EnableFaceBeauty | Enable Touch up my appearance. | Disabled, 0 | Boolean |
| SetFaceBeautyValue | Used in conjunction with EnableFaceBeauty, this allows you to set the exact intensity of the Touch up my appearance filter. | (Disabled), 25 | String |
| EnableLightAdaption | Enable Adjust for low-light video setting. | Disabled, 0 | Boolean |
| EnableAutoLightAdaption | Set mode of adjusting low-light video feature. This is dependent on the EnableLightAdaption option. 1 - Auto 0 - Manual |
Auto, 1 | Boolean |
| SetLightAdaptionManualValue | Used in conjunction with EnableLightAdaption, this allows you to set the exact intensity of the low-light adjustment. | (Disabled), 20 | String |
| AlwaysShowVideoPreviewDialog | Always show the video preview when joining a meeting. | Enabled, 1 | Boolean |
| HideNoVideoUsers | Hide non-video participants by default. | Disabled, 0 | Boolean |
| EnableSpotlightSelf | Show self as the active speaker when speaking. | Disabled, 0 | Boolean |
| Enable49video | Set max number of participants displayed in Gallery View to 49 participants per screen. | Disabled, 0 | Boolean |
| EnableHardwareAccForVideoSend | Use hardware acceleration for video processing, when sending video. | Enabled, 1 | Boolean |
| EnableHardwareAccForVideoReceive | Use hardware acceleration for video processing, when receiving video. | Enabled, 1 | Boolean |
| EnableTemporalDeNoise | Remove noise from video feeds during processing. | Enabled, 1 | Boolean |
| VideoRenderMethod | Set the video rendering method: 0 - Auto 1 - Direct3D11 Flip Mode 2 - Direct3D11 3 - Direct3D9 4 - GDI |
Auto, 0 | String |
| SetVideoRenderingPostProcessing |
Adjust the use of video rendering post processing used by the desktop client. |
Auto, 0 | String |
| SetVideoCapturingMethod | Adjust the method of video capture used by the desktop client. 0 - Auto 1 - Direct Show 2 - Media Foundation |
Auto, 0 | String |
| EnableGPUComputeUtilization | Use hardware acceleration for video processing. | Enabled, 1 | Boolean |
| Audio | |||
| DisableComputerAudio | Disable and remove the Computer Audio from the meeting audio options. | Disabled, 0 | Boolean |
| SetUseSystemDefaultMicForVoip | Use the default system microphone in Windows. | Disabled, 0 | Boolean |
| SetUseSystemDefaultSpeakerForVoip | Use the default system speakers in Windows. | Disabled, 0 | Boolean |
| SetUseSystemCommunicationMicForVOIP | Use the system default communication microphone for computer audio. | Disabled, 0 | Boolean |
| SetUseSystemCommunicationSpeakerForVOIP | Use the system default communication speaker for computer audio. | Disabled, 0 | Boolean |
| AudioAutoAdjust | Enable Automatically adjust microphone volume audio setting. | Enabled, 1 | Boolean |
| SetSuppressBackgroundNoiseLevel |
Set level of background noise suppression: |
Auto, 0 | String |
| EnableOriginalSound | Enable the Original sound for musicians audio profile for the meeting audio input. | Disabled, 0 | Boolean |
| AutoJoinVOIP | Automatically connect audio with computer audio when joining a meeting. | Disabled, 0 | Boolean |
| MuteVoipWhenJoin | Mute computer audio microphone when joining a meeting. | Disabled, 0 | Boolean |
| EnableHIDControl | Enables HID control of USB devices by the Zoom client. | Enabled, 1 | Boolean |
| SetAudioSignalProcessType |
Set audio signal processing for Windows audio devices: |
Auto, 0 | String |
| Screen sharing | |||
| DisableScreenShare | Disable the ability to share your screen in meetings and webinars. Note: This does not disable incoming screen sharing from other participants. |
Disabled, 0 | Boolean |
| NoAeroOnWin7 | Disable Aero mode when screen sharing on Windows 7 system. | Enabled, 1 | Boolean |
| AutoFullScreenWhenViewShare | When viewing shared content, the content window automatically goes fullscreen. | Enabled, 1 | Boolean |
| AutoFitWhenViewShare | When viewing shared content, the content window automatically adjusts to fit the viewer's screen. | Enabled, 1 | Boolean |
| ShowZoomWinWhenSharing | Show Zoom windows when screen sharing. | Disabled, 0 | Boolean |
| EnableSplitScreen | Use Side-by-Side mode when viewing shared content. | Disabled, 0 | Boolean |
| zDisableAnnotation | Disable and remove the ability to annotate over shared screen. | Disabled, 0 | Boolean |
| EnableShareAudio | Enable the Share computer audio option when sharing. | Disabled, 0 | Boolean |
| EnableShareVideo | Enable the Optimize for video clip option when sharing. | Disabled, 0 | Boolean |
| DisableWhiteBoard | Disable Classic Whiteboard feature. | Disabled, 0 | Boolean |
| DisableInMeetingWhiteBoard | Disable the Zoom Whiteboard feature in meetings and webinars. | Disabled, 0 | Boolean |
| DisableSlideControl | Disable Slide Control feature. | Disabled, 0 | Boolean |
| DisableDesktopShare | Disable the option to share your desktop when screen sharing. | Disabled, 0 | Boolean |
| DisableRemoteControl | Disable Remote Control feature. | Disabled, 0 | Boolean |
| DisableRemoteSupport | Disable Remote Support feature. | Enabled, 1 | Boolean |
| RemoteControlAllApp | Allow remote control of all applications. | Disabled, 0 | Boolean |
| EnableShareClipboardWhenRemoteControl | Allow clipboard access during remote control. | Disabled, 0 | Boolean |
| PresentInMeetingOption | Set sharing option when sharing your screen within a meeting: 0 - Show all sharing options 1 - Automatically share desktop |
Show all sharing options, 0 | Boolean |
| EnableDoNotDisturbInSharing | Silence system notifications when sharing desktop. | Enabled, 1 | Boolean |
| LegacyCaptureMode | Disable GPU acceleration. | Disabled, 0 | Boolean |
| SetScreenCaptureMode | Set the screen capture mode: 0 - Auto 1 - Legacy operating systems 2 - Share with window filtering 3 - Advanced share with window filtering 4 - Advanced share without window filtering |
Auto, 0 | String |
| EnableHardwareOptimizeVideoSharing | Use hardware acceleration to optimize video sharing. | Enabled, 1 | Boolean |
| Zoom Phone | |||
| HidePhoneInComingCallWhileInMeeting | Prevent incoming call notifications while in a meeting. | Disabled, 0 | Boolean |
| EnableLaunchApp4IncomingCalls | Control the Launch an external app or a URL for incoming calls option in the client. This must be used in coordination with SetCommand4IncomingCalls, so that the URL can be configured as well. |
Disabled, 0 | Boolean |
| SetCommand4IncomingCalls | Set the URL used when the client receives an incoming call. This must be used in coordination with EnableLaunchApp4IncomingCalls. |
Disabled, (empty) | String |
| ClickToCallDefault |
Choose which Zoom service is used when clicking a phone number to place a call. 0 - Zoom Phone |
Zoom Phone, 0 | String |
| In-meeting Chat | |||
| zDisableChat | Disable in-meeting chat. | Disabled, 0 | Boolean |
| zDisableFT | Disable in-meeting file transfer. (sending or receiving) | Disabled, 0 | Boolean |
| DisableMeeting3rdPartyFileStorage | Disable in-meeting 3rd party file transfer. | Disabled, 0 | Boolean |
| Zoom Apps | |||
| DisableZoomApps | Hide the Zoom Apps button. | Disabled, 0 | Boolean |
|
DisableZoomAppsGuestAccess |
Control the ability for users to utilize a Zoom App in Guest mode. | Disabled, 0 | Boolean |
| Background and Filters | |||
| DisableVirtualBkgnd | Disable Virtual Background feature. | Disabled, 0 | Boolean |
| DisableVideoFilters | Disable Video filters feature. | Disabled, 0 | Boolean |
| EnableAutoReverseVirtualBkgnd | Require post-meeting virtual background auto-reversal. | Disabled, 0 | Boolean |
| Recording | |||
| RecordPath, C:/your_recording_path | Set the default recording location for local recordings. | Documents folder | String |
| zDisableCMR | Disable recording to the cloud. | Disabled, 0 | Boolean |
| zDisableLocalRecord | Disable recording locally on the device. | Disabled, 0 | Boolean |
| NotifyCMRAvailable |
Control the desktop client setting Show notifications when a new recording is available. | Enabled, 1 | Boolean |
| Zoom Room and Room System calling | |||
| DisableDirectShare | Disable direct share with Zoom Rooms option. | Disabled, 0 | Boolean |
| EnableStartMeetingWithRoomSystem | Display the Call Room System button on the home screen of the desktop client. | Disabled, 0 | Boolean |
| AppendCallerNameForRoomSystem | Display the caller name for room systems being invited to Zoom meeting. | Disabled, 0 | Boolean |
| PresentToRoomWithAudio | Share sound when screen sharing to a Zoom Room. | Enabled, 1 | Boolean |
| PresentToRoomOptimizeVideo | Optimize screen sharing for video clip when sharing to a Zoom Room. | Enabled, 1 | Boolean |
| PresentToRoomOption | Set sharing option when sharing to a Zoom Room: 0 - Show all sharing options 1 - Automatically share desktop |
Automatically share desktop, 1 | Boolean |
| Zoom Chat | |||
| zDisableIMLinkPreview | Disable link previews. | Disabled, 0 | Boolean |
| SetMessengerDoNotDropThread | Move messages with new replies to the bottom of the chat/channel. | Enabled, 1 | Boolean |
| ShowProfilePhotosInChat | Controls if user profile pictures are shown in Zoom Chat. | Enabled, 1 | Boolean |
| ShowVoiceMessageButton | Allow use of the Send audio message option. | Enabled, 1 | Boolean |
| ShowVideoMessageButton | Allow use of the Send video message option. | Enabled, 1 | Boolean |
| AlwaysShowIMNotificationBanner | Show notifications for new Zoom Chat messages until dismissed. | Disabled, 0 | Boolean |
| PlaySoundForIMMessage | Play audio notifications when an IM message is received. | Enabled, 1 | Boolean |
| ShowIMMessagePreview | Allow message previews in system notifications when a chat message is received. | Enabled, 1 | Boolean |
| MuteIMNotificationWhenInMeeting | Mute chat system notifications when in a meeting. | Enabled, 1 | Boolean |
| Miscellaneous | |||
| EmbedUserAgentString | Embed a specified user agent string for all HTTP requests from Zoom client. | Disabled, use default user agent string | String |
| EmbedDeviceTag | Embed a specified device tag string for all HTTP requests from Zoom client application. This string will be appended to the head of the regular HTTP requests. | Disabled, (empty) | String |
| EnableAutoUploadDumps | Automatically send dump files to Zoom to improve services. | Disabled, 0 | Boolean |
| EnableAutoUploadMemlogs | Automatically send critical-failure-logs to Zoom to improve services. | Disabled, 0 | Boolean |
| IntegrateZoomWithOutlook | Show Zoom contact status in Outlook, and sets Zoom as the default chat, meeting, and phone app in Outlook. | Disabled, 0 | Boolean |
| SetAccEventsOptions | Set what alerts will be read by a screen reader. The following options are available and must be entered as the combined numeric value of all the alerts you want in the string: 1 - IM chat received 2 - Participant joined/left meeting 4 - Participant joined/left waiting room 8 - Audio muted/unmuted by host 16 - Video stoped by host 32 - Screen sharing started stoped by participant 64 - Recording permission granted revoked 128 - Public meeting chat received 256 -Private meeting chat received 512 - File uploaded to in-meeting chat 1024 - Closed captioning available 2048 - Closed captioning typing privilege granted/revoked 4096 - Host controls granted/revoked 8192 - Co-host controls granted/revoked 16384 - Remote control permission granted/revoked 32768 - Livestream started/stopped 65536 - Participant raised/lowered hand 131072 - Q&A question received 262144 - Q&A answer received 524288 - Webinar role changed to panelist 1048576 - Webinar role changed to attendee |
All alerts will be read, (empty) | String |
| Intercloud Policies | |||
| OverrideEnforceSigninIntercloud | Override the EnforceSignInToJoin policy and allows a user to join a Zoom meeting hosted on the ZfG Cloud, without the need to authenticate. | Disabled, 0 | Boolean |
| Intercloud_DisableAllFeatures | Disables all features except for audio and video for meetings hosted on the ZfG cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableMeetingChat | Disables the use of in-meeting chat on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableShareScreen | Disables the local ability to share screen on meetings hosted on the ZfG Cloud. This does not affect others' ability to shared content. |
Disabled, 0 | Boolean |
| Intercloud_DisableMeetingReactions | Disables the use of meeting reactions on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableMeetingFileTransfer | Disables the use of file transfers through in-meeting chat on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableAnnotation | Disables the local ability to annotate on shared content in meetings hosted on the ZfG Cloud. This does not affect others' ability to annotate. |
Disabled, 0 | Boolean |
| Intercloud_DisableWhiteBoard | Disables the use of in-meeting whiteboarding on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableLocalRecording | Disabled by default, this option disables the ability to locally record meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableClosedCaptioning | Disabled by default, this option disables the use of captioning features on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableRemoteControl | Disabled by default, this option disables the remote control of shared screens in meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableMeetingPolls | Disabled by default, this option disables the use of polling in meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Intercloud_DisableComputerAudio | Disabled by default, this option disables the use of computer audio for connecting to meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean |
| Zoom Mesh | |||
|
MeshMulticastIP |
When utilizing Zoom Mesh, this policy allows admins to specify a valid IP address to be a UDP multicast IP for Zoom apps to declare themselves and detect each other in their local sub-network (255.255.255.0). Admins can choose other IP addresses within the range of [224.0.0.1, 239.255.255.255]. |
224.0.0.1, <empty> | String |
|
MeshMulticastPort |
When utilizing Zoom Mesh, this policy allows an admin to specify a valid port to be used as the UDP multicast port to communicate with other Zoom Mesh nodes on the network. | Port 36699, 0 | String |
|
MeshListenPortRange |
When utilizing Zoom Mesh, this policy allows a valid port range to be used to set up listen sockets for connection requests between Mesh parents and children nodes. The nodes will also use this range to send signals and media data. | 18801-19800, <empty> | String |
|
EnableGuestMesh |
When utilizing Zoom Mesh, this allows external users (not on your account) to join a Webinar through the local Zoom Mesh-enabled network. Other requirements must be met, such as the device having the minimum supported client version for Mesh connections and the associated account setting in the web portal also enabled. | Disabled, 0 | Boolean |
Notes:
- (A) These options are only available for devices in the China region.
- (B) Please have an account admin or owner contact Zoom Support to acquire your account ID.
- (C) Please have an account admin or owner contact Zoom Support to have this enabled for use. The owner will also need to edit a role to have view/edit access to Device Policy Management. The required token can then be retrieved from the Device Policy Management page.
You can also configure with Microsoft command-line options.
How to deploy with Intune
- Log in to Microsoft Intune.
- Click Client apps.
- Click Apps.
- Click Add.
- For App type, select Line-of-business app, then click Select.
- Click Select app package file.
- Click Select a file, and choose the ZoomInstallFull.msi.
- Click OK.
- In the App information tab enter the following:
- Description- Enter the description of the app, i.e Zoom Meeting app.
- Publisher- Enter Zoom Video Communications.
- App install context- Click Device.
- Command-line arguments- Enter any MSI installation switches as provided in sections above.
- Click Next.
- Add any desired Scope tags.
- Click Next.
- Choose if the app is required for any specific user groups, all users, and/or all devices.
- Click Next.
- Review the deployment summary, then click Create.
Uninstall switches
To uninstall Zoom completely, please use the following Clean Zoom uninstaller. It is generally not necessary to use the clean uninstaller when updating to a new version of Zoom, as deploying the new version will replace the former.
The following switches are available when running the installer:
| MSI option | Description |
|---|---|
| /silent | Removes Zoom silently. |
| /keep_outlook_plugin | Removes Zoom, but leaves the Outlook Plugin installed. |
| /keep_lync_plugin | Removes Zoom, but leaves the Lync/Skype for Business Plugin installed. |
| /keep_notes_plugin | Removes Zoom, but leaves the Notes Plugin installed. |
| /vdi_clean |
Removes the the following Zoom VDI client and plugins:
By default, this will also remove Outlook, Lync and Notes plugins, but this can be prevented by using the options above to keep them in place. |
Note: Use of the clean uninstaller will completely remove the Zoom client, as well as the Zoom plugin for Outlook. The Outlook add-in, Chrome/Firefox extensions, and GSuite add-on are unaffected.
How to download the Zoom Room MSI installer
- Go to the Zoom Download Center
- Click on Download for IT Admin, and then click one of the following links under the Zoom Rooms Client section:
- Download MSI: Download the latest 32-bit version of the MSI installer.
- Download 64-bit Client: Download the latest 64-bit version of the MSI installer.
Configuration options for Zoom Rooms for Windows
The following options are configured as part of the main command-line deployment of the Zoom Rooms client. A basic deployment example is given for each item, with each option bolded in its corresponding example.
For other common installation options, please refer to the Microsoft article for MSI installations.
| MSI option | Description | Deployment example | Value type |
|---|---|---|---|
|
Silent install |
Install the client without user interaction, any install windows, or immediate restart. |
msiexec /i ZoomRoomsInstaller.msi /quiet Silent=true |
Boolean |
| EnableSSLVerification | Verify SSL certificate. | msiexec /i ZoomRoomsInstaller.msi EnableSSLVerification=true | Boolean |
|
AcceptGDPR |
Automatically accept the GDPR license. |
msiexec /i ZoomRoomsInstaller.msi AcceptGDPR=true |
Boolean |
|
SystemAutoLogin SystemUserName SystemPassword |
Automatically login with the provided username and password. |
msiexec /i ZoomRoomsInstaller.msi SystemAutoLogin=true SystemUserName="windows user name" SystemPassword="windows password" |
SystemAutoLogin - Boolean UserName and Password - String |
| SystemOption | The following options are available and must be entered as the combined numeric value of all the options you want enabled in the string: 1 - Automatically lock the screen 2 - Disable password upon wakeup 4 - Disable Cortana 8 - Disable notifications 16 - Disable Windows updates 32 - Enable High Performance Power 64 - Disable Hibernation 128 - Never Sleep 256 - Never Turn Off Display For example, to disable Cortana (4) and system notifications (8), set this as "SystemOption=12". |
msiexec /i ZoomRoomsInstaller.msi SystemOption=12 | String |
Configuration options for the Outlook Plugin for Windows
The following options are configured as part of the main command-line deployment of the Zoom Outlook plugin.
For other common installation options, please refer to the Microsoft article for MSI installations.
| MSI option | Description | Default state and value | Value type |
|---|---|---|---|
|
UsePMI |
Always use PMI when scheduling meetings. |
Disabled, 0 |
Boolean |
|
AutoUpdate |
Allow the user to check for updates for the Outlook plugin. |
Enabled, 1 |
Boolean |
|
StandardUserUpdate |
Allow standard user updating. This is ignored if AutoUpdate is disabled. |
Disabled, 0 |
Boolean |
Active Directory Administrative Template configuration
For a breakdown of the policies and options available for configuration, please see our list of available Group Policies and templates.
Zoom Community
Join the 100K+ other members in the Zoom Community! Login with your Zoom account credentials and start collaborating.