Mass deployment with preconfigured settings for Windows

Last Updated:

The Zoom Desktop Client can be mass configured for Windows in three different ways: via the MSI installer for both configuration and installation, an Active Directory administrative template utilizing Group Policy for configuration, or via registry keys for configuration.

Zoom Rooms for Windows can also be configured with an Active Directory administrative template utilizing Group Policy or registry keys.

If utilizing the MSI installer, Zoom can be deployed via GPO or SCCM. If installing the client via GPO script, install using a startup script for the desktop client. If you also want to deploy the Outlook plugin via GPO script, install using a logon script.

Installing with an Active Directory Administrative Template or registry keys, administrators can lock certain features and settings upon deployment of Zoom. 

Note: MSI installations require elevated administrative rights. 

This article covers:

Learn to install Zoom with preconfigured settings for Mac.


Note: Some of the switches listed below require the latest version of the Zoom IT Installer.

Downloading the MSI installer

  1. Go to the Download Center
  2. Click on Download for IT Admin or download directly from

Priority of settings

Settings can be configured in multiple places. Some can only be configured by the Zoom Admin or IT Admin and some can be configured by the end user. If settings conflict, Zoom will use the following priority:

  • Setting deployed via MSI/GPO with zConfig
  • Web setting locked for the account or group
  • Client setting selected by the user
  • Setting deployed via MSI/GPO with zRecommend
  • Web setting that are not locked

Deploying and configuring the Zoom desktop client

Command-line deployment

Install: msiexec /package ZoomInstallerFull.msi /lex zoommsi.log

Silent install: msiexec /i ZoomInstallerFull.msi /quiet /qn /norestart /log install.log

Wait until in-progress meeting ends before installing:  msiexec /i ZoomInstallerFull.msi /norestart MSIRESTARTMANAGERCONTROL=”Disable”

Silent auto-start: Disabled by default, this option makes the desktop client automatically and silently start with Windows. To enable, append zSilentStart="true" to the end of your install choice.

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log zSilentStart="true"

No desktop shortcut: Disabled by default, this option prevents the creation of a desktop shortcut on install or update. To enable, append zNoDesktopShortCut="true" to the end of your install choice.

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZNoDesktopShortCut="true"

Preconfigure SSO URL: Disabled by default, this option allows you to preconfigure the SSO URL. To set a URL, append zSSOHost="vanity_URL" to the end of your install choice. For example, can be set with any of the following formats: 

  • "hooli"
  • "https://hooli"
  • ""

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log zSSOHost="vanity_URL"

Auto-update: Disabled by default, this will remove the Check for Updates option in the client and thus not allow users to check for and install updates for the Zoom client. If auto-update is enabled, users will be able to check for updates in the client and will not require elevated admin rights to update. To enable and allow users to update the Zoom client, append ZoomAutoUpdate="true" to your install choice:

msiexec /package  ZoomInstallerFull. msi /lex zoommsi.log ZoomAutoUpdate="true"


  • Auto-update is not a true auto-update feature. This only allows the user to manually check for updates and the desktop client will not keep itself on the latest client version automatically. Please refer to EnableSilentAutoUpdate or AlwaysCheckLatestVersion for auto-update options below. 
  • The VDI Client will not respond to the auto-update switch.
  • The VDI Host Installer is an MSI file type that can use the same switches as the standard client MSI program. It can be deployed through normal software and device management tools. The VDI Client will respond to the same MSI configuration as the non-VDI client and can be configured accordingly. 

Advanced Sharing Service: Enabled by default, this option can disable this service, which can prevent prompting for admin credentials during upgrading. If this service is disabled, the auto-updating experience may be affected slightly. To disable, append DisableAdvancedSharingService=true to the end of your install choice.

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log DisableAdvancedSharingService=true

Firewall port start and end: Sets the inbound and outbound firewall rules for the Zoom client. FirewallPortStart and FirewallPortEnd need to be configured together, as Zoom does not recommend enabling one without enabling the other. 

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log FirewallPortStart="7200" FirewallPortEnd="17210"

Additional Configuration Options

zConfig: To enable additional options, append the ZConfig parameter to the end of your install choice. Separate multiple options by ';':

msiexec /package ZoomInstaller.msi /norestart /lex msi.log ZConfig="account=your_account_id;nogoogle=1;nofacebook=1;"

Additional options for ZConfig are listed in the tables below.

Allow users to change settings: to deploy settings but allow users to change them within the Zoom desktop client, deploy with "ZRecommend" instead of "ZConfig". For example, msiexec /i ZoomInstallerFull.msi ZRecommend="AudioAutoAdjust=1"  

If you want to force certain settings, but allow users to change other default settings, use both ZConfig and ZRecommend . For example, msiexec /i ZoomInstallerFull.msi  ZConfig="nogoogle=1" ZRecommend="AudioAutoAdjust=1" 

Note: If a setting has been set for both ZConfig and ZRecommend, ZConfig will still lock the setting, and can not be changed by the user. 

Intune deployment

  1. Log in to Microsoft Intune.
  2. Click Client apps.
  3. Click Apps.
  4. Click Add.
  5. For App type, select Line-of-business app, then click Select.
  6. Click Select app package file.
  7. Click Select a file, and choose the ZoomInstallFull.msi. 
  8. Click OK.
  9. In the App information tab enter the following:
    • Description- Enter the description of the app, i.e Zoom Meeting app.
    • Publisher- Enter Zoom Video Communications.
    • App install context- Click Device.
    • Command-line arguments- Enter any MSI installation switches
      • For enabling default settings that need to be locked, begin each setting switch with ZConfig. Ex. ZConfig=”nogoogle=1”.
      • For enabling default settings, that users can change, begin each setting switch with ZRecommend. Ex. ZRecommend=”AudioAutoAdjust=1”.
  10. Click Next.
  11. Add any desired Scope tags.
  12. Click Next.
  13. Set if the app is required for any specific user groups, all users, and/or all devices.
  14. Click Next.
  15. Review the deployment summary, then click Create.

Configuration options

Note: Registry entries for the following settings will be located in the following locations: 

  • 64-bit version: HKEY_LOCAL_MACHINE\SOFTWARE\ZoomUMX\

General settings

Description Default state and value MSI option  Value type
Remove Google login option Disabled, 0 NoGoogle Boolean
Remove Facebook login option Disabled, 0 NoFacebook Boolean
Remove Email login option Disabled, 0 DisableLoginWithEmail Boolean
Remove SSO login option Disabled, 0 NoSSO Boolean
Require new SSO login upon client start Disabled, 0 DisableKeepSignedInWithSSO Boolean
Require new Google login upon client start Disabled, 0 DisableKeepSignedInWithGoogle Boolean
Require new Facebook login upon client start Disabled, 0  DisableKeepSignedInWithFacebook Boolean
Set and lock the default SSO URL for a client login

For example, would be set as ForceSSOUrl=hooli
Disabled ForceSSOUrl=your_company String
Prevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL. Disabled, 0 DisableAutoLaunchSSO
Defaults login to use SSO Disabled, 0 AutoSSOLogin Boolean
Block connections to untrusted SSL certificates Enabled, 1 BlockUntrustedSSLCert Boolean
Embed a specified user agent string for all HTTP requests from Zoom client Disabled EmbedUserAgentString String
Disable UAC prompt when logging into Zoom Enabled, 1 AddFWException Boolean
Minimize Zoom to system tray Enabled, 1 Min2Tray Boolean
Auto-start Zoom when Windows starts Disabled, 0 ZoomAutoStart Boolean
Auto-start Zoom silently when Windows starts Disabled, 0 zSilentStart Boolean

Allows the desktop client to silently check for updates and, if user’s version is lower than the stable version set by Zoom, install upon launching the client.

This option requires the AutoUpdate option to be enabled. 

Enabled, 1 EnableSilentAutoUpdate Boolean

Allows the desktop client to check for updates and, if user’s version is lower than the latest version set by Zoom, prompt the user to install the update.

This option requires the AutoUpdate option to be enabled.

Disabled, 0 AlwaysCheckLatestVersion Boolean

Allows the control of the cadence of updates applied to the desktop client. 

Slow (0): fewer updates and better stability
Fast (1): newest features and updates

Slow (0)  SetUpdatingChannel Boolean

Prevents the desktop client from upgrading to the 64-bit version automatically, if the 32-bit version is installed on a 64-bit system.

Disabled, 0 DisableUpdateTo64Bit Boolean
Do not create a desktop shortcut for Zoom  Disabled, 0 zNoDesktopShortCut Boolean
Set the email address domain that users can login with Disabled  Login_Domain, domain  String

Forces users to be signed in before joining a meeting from the app. Users can be signed-in on the web portal when joining through join URL. 

Disabled, 0 EnforceSignInToJoin Boolean
Require the client to be logged in to a Zoom account before joining any meeting. Disabled EnforceAppSignInToJoin Boolean
Set account IDs (A) that the client is restricted to join meetings hosted by specific accounts Disabled, 0 Account, your_account_id String
Enforce internal meeting authentication (B) Disabled SetDevicePolicyToken, device_token String
Keep the user signed in to the client when it is restarted (email login only) Disabled, 0 KeepSignedIn Boolean
Zoom client will automatically open and after system reboot. Disabled, 0 AutoStartAfterReboot Boolean
Zoom client will start in the system tray after system reboot. Disabled, 0 AutoStartInSystemTray Boolean
Sets the web domain for logging in or joining a meeting. By default, the value is or Disabled, empty SetWebDomain, domain String
Default to Portrait Mode upon opening Zoom Disabled, 0 DefaultUsePortraitView Boolean
Share sound when screen sharing to a Zoom Room Enabled, 1 PresentToRoomWithAudio Boolean
Displays the Call Room System button on the home screen of the Zoom client Disabled, 0 EnableStartMeetingWithRoomSystem Boolean
Display the caller name for Room system being invited to Zoom meeting Disabled, 0 AppendCallerNameForRoomSystem Boolean
Enables HID control of USB devices by the Zoom client Enabled, 1 EnableHIDControl Boolean

If enabled, the client will use the following ports for media transmission:

Audio: 8803
Screen share: 8802
Video: 8801

Disabled, 0 EnableIndependentDataPort Boolean

Use embed browser in the client for SSO

Disabled, 0 EnableEmbedBrowserForSSO Boolean

Automatically send logs, when there is a critical-failure issue

Disabled, 0 EnableAutoUploadDumps Boolean

Show Zoom contact status in Outlook, and sets Zoom as the default chat, meeting, and phone app in Outlook.

Disabled, 0 IntegrateZoomWithOutlook Boolean

Enable touch up my appearance

Disabled, 0 EnableFaceBeauty Boolean

Remote control all applications

Disabled, 0 RemoteControlAllApp Boolean

Zoom client starts an elevated video process to support advanced DSCP marking

Disabled, 0 EnableElevateForAdvDSCP Boolean

When enabled, screen share traffic is sent over TCP instead of UDP.

Disabled, 0 ShareSessionDisableUDP

Prevent audio traffic over proxies

Disabled, 0 DisableAudioOverProxy Boolean

Prevent video traffic over proxies

Disabled, 0 DisableVideoOverProxy Boolean

Prevent screen sharing traffic over proxies

Disabled, 0 DisableSharingOverproxy Boolean

Set a proxy server for the client as named proxy.

Example: server: port

Disabled ProxyServer, proxy_address String
Set proxy server to client with PAC URL Disabled ProxyPac, your_pac_url String
Set proxy bypass rule for the Zoom client Disabled ProxyBypass, bypass_rule String
Remove noise from video feeds when processing. Enabled, 1 EnableTemporalDeNoise Boolean
Use hardware acceleration for video processing. Enabled, 1 EnableGPUComputeUtilization Boolean
Use hardware acceleration for video processing, when sending video. Enabled, 1 EnableHardwareAccForVideoSend Boolean
Use hardware acceleration for video processing, when receiving video. Enabled, 1 EnableHardwareAccForVideoReceive Boolean
Ignore bandwidth limited set on web settings. Useful for exceptions.  Disabled, 0 IgnoreBandwidthLimits Boolean
Allow specific URLs to be trusted and bypass the untrusted certificate prompt if the certificate is revoked. Multiple domains should be separated by ";", for example ";" Disabled, empty SetNoRevocationCheckUrls String
Hide Zoom Apps quick launch button in the Zoom interface. Disabled, 0 DisableZoomApps Boolean


  • (A) Please have an account admin or owner contact Support to acquire your account ID. 
  • (B) Please have an account admin or owner contact Support to have this enabled for use. The owner will also need to edit a role to have view/edit access to Device Policy Management. The required token can then be retrieved from the Device Policy Management page.

Meeting settings

Description Default state and value MSI option Value type
Turn off camera when joining a Meeting Disabled, 0 DisableVideo Boolean
When joining a meeting, the meeting window launches in a fullscreen window by default Enabled, 1 AutoFullScreenWhenViewShare Boolean
Automatically adjusts screen share content to fit the viewer's screen Enabled, 1 AutoFitWhenViewShare Boolean
Use HD video when joining a meeting Disabled, 0 Use720pByDefault Boolean
Automatically enable dual monitor Disabled, 0 UseDualMonitor Boolean
Prevent full screen when starting or joining a meeting Disabled, 0 FullScreenWhenJoin Boolean
Always show meeting controls (Enables Always show meeting controls) Enabled, 1 AutoHideToolbar Boolean
Hide non-video participants by default Disabled, 0 HideNoVideoUsers Boolean
Always mute microphone when joining a meeting Disabled, 0 MuteVoipWhenJoin Boolean
Auto-connect audio with computer audio when joining a meeting Disabled, 0 AutoJoinVOIP Boolean

Set audio signal processing for Windows audio devices

Auto - 0
Off - 1
On - 2

Auto, 0 SetAudioSignalProcessType String

Set noise suppression level

Auto - 0
Low -1
Medium - 2
High - 3

 Auto, 0 SetSuppressBackgroundNoiseLevel String
Show the length of time that the user has been in a meeting Disabled, 0 ShowConnectedTime Boolean
Confirm before leaving a meeting Enabled, 1 ConfirmWhenLeave Boolean
Disable Screen Share when starting or joining a meeting Disabled, 0 DisableScreenShare Boolean
Disable Window's Aero Mode on Windows 7 Disabled, 0 NoAeroOnWin7 Boolean
Set the default recording location for local recordings Documents folder RecordPath, C:/your_recording_path String
Automatically adjust microphone settings

Enabled, 1

AudioAutoAdjust Boolean
Controls the Original Audio setting for the microphone Disabled, 0 EnableOriginalSound Boolean
Always use PMI for instant meetings Disabled, 0 UsePMI Boolean
Disable in-meeting chat Disabled, 0 zDisableChat Boolean

Disable in-meeting file transfer (sending or receiving files)

Disabled, 0 zDisableFT Boolean
Disable in-meeting 3rd party file transfer Disabled, 0 DisableMeeting3rdPartyFileStorage Boolean
Disable local recording Disabled, 0 zDisableLocalRecord Boolean
Disable cloud recording Disabled, 0 zDisableCMR Boolean
Disable sending video Disabled, 0 zDisableSendVideo Boolean
Disable receiving video Disabled, 0 zDisableRecvVideo Boolean
Disables send and receiving of video Disabled, 0 zDisableVideo Boolean
Enable mirroring of your video Enabled, 1 EnableMirrorEffect Boolean
Displays the Call Room System button on the home screen of the Zoom client Disabled, 0 EnableStartMeetingWithRoomSystem Boolean
Client will optimize screen sharing for video clip when sharing directly to a Zoom Room. Enabled, 1 PresentToRoomOptimizeVideo Boolean

Set sharing option when sharing directly to a Zoom Room. 

0 - Show all sharing options

1 - Automatically share desktop

1 PresentToRoomOption Boolean

Set sharing option when sharing directly to a Zoom Room within a meeting.

0 - Show all sharing options

1 - Automatically share desktop

0 PresentInMeetingOption Boolean

Set maximum sending bandwidth

Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. 


BandwidthLimitUp, amount
(all values in Kbps)


Set maximum receiving bandwidth 

Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. 

Disabled BandwidthLimitDown, amount
(all values in Kbps)

Split traffic across different ports for easier identification
Video share: 8801
Screensharing: 8802
Audio: 8803

Disabled, 0 EnableIndependentDataPort Boolean

Always show the video preview when joining a meeting

Enabled, 1 AlwaysShowVideoPreviewDialog Boolean

Remove Computer Audio from the Audio Options 

Disabled, 0 DisableComputerAudio Boolean

Automatically mute the microphone, when the screen is locked during meeting

Enabled, 1 MuteWhenLockScreen Boolean

Use default system speakers in Windows

Disabled, 0 SetUseSystemDefaultSpeakerForVoip Boolean

Use default system microphone in Windows

Disabled, 0 SetUseSystemDefaultMicForVoip Boolean

Use Side-by-Side Mode for viewing a shared screen 

Disabled, 0 EnableSplitScreen Boolean

Disable Remote Control

Disabled, 0

DisableRemoteControl Boolean

Disable Remote Support

Enabled, 1

DisableRemoteSupport Boolean

Disable the use of closed captioning

Disabled, 0

DisableClosedCaptioning Boolean

Disable the use of manual, user-entered captioning

Disabled, 0

DisableManualClosedCaptioning Boolean

Disable the use of Q&A in webinars

Disabled, 0

DisableQnA Boolean

Disable the use of slide control

Disabled, 0

DisableSlideControl Boolean

Prevent incoming call notifications while in a meeting

Disabled, 0 HidePhoneInComingCallWhileInMeeting Boolean

Allow clipboard access during remote control sessions

Disabled, 0 EnableShareClipboardWhenRemoteControl Boolean

Disable Virtual Background

Disabled, 0 DisableVirtualBkgnd Boolean

Disable video filters 

Disabled, 0 DisableVideoFilters Boolean

Set the specified screen capture mode:

0 - Auto
1 - Legacy operating systems
2 - Share with window filtering
3 - Advanced share with window filtering
4 - Advanced share without window filtering

Auto, 0 SetScreenCaptureMode String

Disable GPU Acceleration

Disabled, 0 LegacyCaptureMode Boolean

Disable whiteboard feature

Disabled, 0 DisableWhiteBoard Boolean

Disables the option to share Desktop when screen sharing

Disabled, 0 DisableDesktopShare Boolean
Disables direct share with Zoom Rooms option  Disabled, 0 DisableDirectShare Boolean
Provide Optimize for video clip option when sharing

Enabled, 1

EnableShareVideo Boolean
Share computer audio feature Disabled, 0 EnableShareAudio Boolean
Silence system notifications when sharing desktop Enabled, 1 EnableDoNotDisturbInSharing Boolean
Show Zoom windows when screen sharing Disabled, 0 ShowZoomWinWhenSharing Boolean
Show self as the active speaker when speaking  Disabled, 0



Set max number of participants displayed in Gallery View to 49 participants per screen Disabled, 0 Enable49video Boolean
Display reminders for upcoming meetings Disabled, 0 EnableRemindMeetingTime Boolean

Sets the specified video rendering method using the following string variables:

0 - Auto
1 - Direct3D11 Flip Mode
2 - Direct3D11
3 - Direct3D9
4 - GDI

Auto, 0 VideoRenderMethod, 0


Chat settings

Description Default state and value MSI option Value type
Disable Link Preview Enabled, 1 zDisableIMLinkPreview Boolean
Move messages with new replies to the bottom of the chat/channel Disabled, 0 SetMessengerDoNotDropThread Boolean
Send voice message option  Enabled, 1 ShowVoiceMessageButton Boolean
Show notification banner on screen until dismissed Disabled, 0 AlwaysShowIMNotificationBanner Boolean
Control the audio notifications when an IM message is received Enabled, 1 PlaySoundForIMMessage Boolean
Control if the message previews in system notifications when an IM message is received Enabled, 1 ShowIMMessagePreview Boolean
Control if IM message system notifications are muted when in a meeting Enabled, 1 MuteIMNotificationWhenInMeeting Boolean


Other parameters

Meeting Options: Disabled by default. To require these settings, append ZConfig="kCmdParam_InstallOption=X". X represents a numeric value.

The values and options enabled are as follows:

Value Option
1 Turn Off Camera when Joining a Meeting
2 Automatically Join VoIP
4 Automatically enable dual monitor
8 Default to login with SSO
16 Automatically enter full screen when viewing shared content
32 Automatically fit to window when viewing shared content
64 Enable 720p by default
128 Remote control all applications

To enable multiple settings, add the values. For example, to enable Automatically Join VoIP (2) AND 720p by default (64), set the ZoomInstall option to 66:

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZConfig="kCmdParam_InstallOption=66"

You can also configure Microsoft command line options

Uninstall switches

To uninstall Zoom completely, please use the following Clean Zoom uninstaller. It is generally not necessary to use the clean uninstaller when updating to a new version of Zoom, as deploying the new version will replace the former.

The following switches are available when running the installer:

Command Function
/silent Removes Zoom silently
/keep_outlook_plugin Removes Zoom, but leaves the Outlook Plugin installed
/keep_lync_plugin Removes Zoom, but leaves the Lync/Skype for Business Plugin installed
/keep_notes_plugin Removes Zoom, but leaves the Notes Plugin installed
/vdi_clean Removes the vdi package

Note: Use of the clean uninstaller will completely remove the Zoom client, as well as the Zoom plugin for Outlook. The Outlook add-in, Chrome/Firefox extensions, and GSuite add-on are unaffected. 

Configuration options for Zoom Rooms for Windows

Description Default state and value MSI option Value type
Verify SSL certificate Disabled, 0 EnableSSLVerification Boolean
Automatically accept the GDPR license Disabled, 0 AcceptGDPR Boolean
Install updates silently without displaying progress bar Disabled, 0 Silent Boolean
Automatically login with username and password Enabled, 1 SystemAutoLogin Boolean


Silent Install with Auto login and Silent Updates: msiexec /i ZoomRoomsInstaller.msi /quiet  ACCEPTGDPR=true SILENT=true SYSTEMAUTOLOGIN=true SYSTEMUSERNAME="windows user name" SYSTEMPASSWORD="windows password"

System Options

These options are disabled by default. To enable, append SYSTEMOPTION=X  (X represents a numeric value. The values and options are as follows):

Value Option
1 Automatically lock the screen
2 Disable password upon wakeup
4 Disable Cortana
8 Disable notifications
16 Disable Windows updates
32 Enable High Performance Power
64 Disable Hibernation
128 Never Sleep
256 Never Turn Off Display

Configuration options for the Outlook Plugin for Windows

Description Default state and value MSI option Value type
Always use PMI by default Disabled, 0 UsePMI Boolean
Allow the user to check for updates for the Outlook plugin Enabled, 1 AutoUpdate Boolean
Allow standard user updating. Ignored if AutoUpdate is disabled.  Disabled, 0 StandardUserUpdate Boolean

Active Directory Administrative Template configuration

For a break down of the policies and options available for configuration, please see our list of available Group Policies and templates.


Zoom Community

Join the 83K+ other members in the Zoom Community! Login with your Zoom account credentials and start collaborating.