Mass-deploying with Group Policy Objects
Last Updated:
The Zoom desktop client can be deployed and configured in bulk for Windows by using the the MSI installer. Administrators can disable features such as screen sharing or video sharing for all meetings that a user joins, regardless of who is hosting the meeting. By installing with an Active Directory Administrative Template or registry keys, administrators can lock certain features and settings upon deployment of the desktop client.
Active Directory admins can configure Zoom settings and features through Group Policy at any time. Zoom does not need to be installed on the computer for these settings to be configured. Zoom can be downloaded at a later time and the configuration will apply the first time Zoom is launched. The settings apply whether the standard installer is used or the MSI installer is used. To ensure compatibility with the policies listed below, we recommend updating to the latest version of the desktop client or Zoom Rooms client.
The Zoom desktop application, as well as the Zoom Rooms application, can also be deployed and configured via command-line or Intune as well.
The desktop client can be enrolled in and managed through Zoom Device Management, which allows you to centrally control desktop client and mobile app settings in the Zoom web portal.
Note: The VDI Host Installer is an MSI file type that can use the same switches as the standard client MSI installer. It can be deployed through normal software and device management tools. The VDI Client will respond to the same MSI configuration as the non-VDI client and can be configured accordingly, except for the AutoUpdate switch.
This article covers:
- Available templates
- Configuration options for the desktop client
- Configuration options for Zoom Rooms
Learn to install Zoom with preconfigured settings for Windows devices, macOS devices, Android devices, and iOS devices. You can also use Zoom’s own Device Management platform to centrally configure desktop client and mobile app settings.
Prerequisites for configuring with GPO
- Windows desktop client (either standard or IT Admin installer)
- macOS desktop client
- Zoom Rooms for PC
Note: Some of the switches listed below require the latest version of the Zoom installer.
Available templates
The following downloads contain the administrative templates, as well as registry files for specific versions of Zoom:
- Windows desktop client
- Policies for version 5.10.3
- Policies for version 5.10.6
- Policies for version 5.11.0
- Policies for version 5.11.3
- Policies for version 5.11.3
- Policies for version 5.12.0
- Policies for version 5.13.0
- Policies for version 5.13.5
- Policies for version 5.13.10
- Policies for version 5.14.5
- Policies for version 5.14.10
- Windows Zoom Room client
Note: Each download includes .ADM and .ADMX files. If using the .ADM files, the policies will be located under Classic Administrative Templates.
Active Directory Administrative Template Configuration
- Login to your Active Directory server as an admin.
- Click Start, choose Administrative Tools, then Active Directory Users and Computers.
- Expand the domain where you would like to set the group policy.
- Right-click on the domain where you would like to set the group policy, click Properties, then Group Policy.
- Create a Group Policy Object and name it Zoom.
- Select the newly created Group Policy Object and click Edit.
- Under the Computer Configuration, right click on Administrative Templates.
- Choose Add/Remove Templates.
- Browse and find the Administrative Template downloaded from this article. Click Open.
- Close the Add/Remove Templates window.
- Under Computer Configuration then Administrative Templates, you should now have the option for Zoom.
- Double click on the Zoom folder to open a list of subfolders: General Settings, Chat Settings, and Meeting Settings.
- Double click on one of the subfolders to view settings and double click on the individual setting to view more information and enable or disable it.
Configuration options for the desktop client
The following Registry options can be found under one of the following locations:
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Meetings\General
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Meetings\Meetings
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Meetings\Chat
The table below indicates which specific location (General, Meetings, and Chat) each option is located.
Note: The order and groupings in this table are not indicative of the actual order and groups of the registry options, but provided in this order to aid reading, finding, and use of the numerous options available.
| Registry Item | Description | Default state and value | Value type | Specific Registry location |
|---|---|---|---|---|
| Install and update | ||||
| AutoStartAfterReboot | Automatically start client after reboot. Note: Once deployed, the desktop client must be started manually once, before this policy will take effect on subsequent reboots. |
Disabled, 0 | Boolean | General |
| AutoStartInSystemTray | Automatically start client in the system tray after reboot. Note: Once deployed, the desktop client must be started manually once, before this policy will take effect on subsequent reboots. |
Disabled, 0 | Boolean | General |
| CloseToSystemTray | Minimize Zoom to system tray when window is closed. | Enabled, 1 | Boolean | General |
| DisableCreatingDesktopShortcut | Prevent the creation of a desktop shortcut on install or update. | Disabled, 0 | Boolean | General |
| EnableClientAutoUpdate | Enable updates through the client by users. When disabled, the Check for Updates button is also hidden. Please refer to the AutoUpdate section for important details. |
EXE: Enabled MSI: Disabled |
Boolean | General |
| SetUpdatingChannel | Control the cadence of updates applied to the desktop client on versions between 5.8.6 and 5.10.1: Slow (0): fewer updates and better stability. Fast (1): newest features and updates. Please see AutoUpdate section for important details. |
Slow (0) | Boolean | General |
| DisableUpdateTo64Bit | Control if the desktop client can upgrade to the 64-bit version upon update, if the 32-bit version is installed on a 64-bit system. | Disabled, 0 | Boolean | General |
| SetEnrollToken4CloudMDM | Enroll your device into Zoom Device Management with a token provided from the web portal. | Disabled, (empty) | String | General |
| Network | ||||
| EnableDiagnostic |
Controls the ability for the desktop client to access the Network Connectivity Tool, which allows a user to test their network connection with Zoom services. | Enabled, 1 | Boolean | Meeting |
| BlockUntrustedSSLCert | Block connections to untrusted SSL certificates. | Enabled, 1 | Boolean | General |
| SetNoRevocationCheckUrls | Allow specific URLs to be trusted and bypass the untrusted certificate prompt if the certificate is revoked. Multiple domains should be separated by ";", for example "hooli.com;hooli.org". | Disabled, (empty) | String | General |
| DisableCertPin | Disable Certificate Pinning. | Disabled, 0 | Boolean | General |
| ProxyPAC | Set proxy server for desktop client with PAC URL. | Disabled, (empty) | String | General |
| ProxyServer | Set a proxy server for desktop client as named proxy. Example: server: port |
Disabled, (empty) | String | General |
| ProxyBypass | Set proxy bypass rule for the desktop client. | Disabled, (empty) | String | General |
| PreproxyDetectPolicy |
Controls the use of an admin-defined proxy pre-detection method, which can be faster for some PAC cases. If this option is not defined, the default Zoom proxy detection is used. Note: This option affects only Windows devices. |
Disabled, (empty) | String | General |
| DisableAudioOverProxy | Prevent audio traffic over proxies. | Disabled, 0 | Boolean | Meetings |
| DisableVideoOverProxy | Prevent video traffic over proxies. | Disabled, 0 | Boolean | Meetings |
| DisableSharingOverProxy | Prevent screen sharing traffic over proxies. | Disabled, 0 | Boolean | Meetings |
| BandwidthLimitUp | Set maximum sending bandwidth for the desktop client. Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. |
Disabled, (empty) | String (all values in Kbps) | Meetings |
| BandwidthLimitDown | Set maximum receiving bandwidth for the desktop client. Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. |
Disabled, (empty) | String (all values in Kbps) | Meetings |
| IgnoreBandwidthLimits | Ignore bandwidth limit set on web settings. (Useful for exceptions to bandwidth restrictions) | Disabled, 0 | Boolean | General |
| EnableIndependentDataPort | If enabled, the client will use the following ports for media transmission: Audio: 8803 Screen share: 8802 Video: 8801 |
Disabled, 0 | Boolean | Meetings |
| ShareSessionDisableUDP | Send screen share traffic over TCP, instead of UDP. | Disabled, 0 | Boolean | General |
| DisableDirectConnection2Web | Disable all direct connections to Zoom web service. | Disabled, 0 | Boolean | General |
| DisableDirectConnectionPK | Will disable the direct connection PK request by the Zoom client | Disabled, 0 | Boolean | General |
| EnableWinExtendProtectedAuth |
Enable to Support Windows Extended Protection with NTLM authentication. (Windows client only) | Disabled, 0 | Boolean | General |
| Authentication | ||||
| DisableFacebookLogin | Remove Facebook login option. | Disabled, 0 | Boolean | General |
| DisableGoogleLogin | Remove Google login option. | Disabled, 0 | Boolean | General |
| EnableAppleLogin | Allow access to Apple login option. | Enabled, 1 | Boolean | General |
| DisableLoginWithSSO | Remove SSO login option. | Disabled, 0 | Boolean | General |
| DisableLoginWithEmail | Remove Email login option. | Disabled, 0 | Boolean | General |
| DisableUserSignUp |
Disable the Sign Up option on the Zoom app, which would otherwise be displayed with Join a Meeting and Sign In options upon opening the Zoom app. | Disabled, 0 | Boolean | General |
| DisableKeepSignedInWithSSO | Require fresh SSO login upon client start. | Disabled, 0 | Boolean | General |
| DisableKeepSignedInWithGoogle | Require fresh Google login upon client start. | Disabled, 0 | Boolean | General |
| DisableKeepSignedInWithFacebook | Require fresh Facebook login upon client start. | Disabled, 0 | Boolean | General |
| KeepSignedIn | Keep the user signed in to the client when relaunched. (Email login only) |
Disabled, 0 | Boolean | General |
| ForceLoginWithSSO | Defaults login to SSO. | Disabled, 0 | Boolean | General |
| SetSSOURL | Set the default SSO URL for SSO login. For example, hooli.zoom.us would be set as "SetSSOURL=hooli". |
Disabled, (empty) | String | General |
| ForceSSOURL | Set and lock the default SSO URL for SSO login. For example, hooli.zoom.us would be set as "ForceSSOUrl=hooli". |
Disabled, (empty) | String | General |
| EnableEmbedBrowserForSSO | Use embedded browser in the client for SSO. | Disabled, 0 | Boolean | General |
| SetWebDomain | Sets the web domain for logging in or joining a meeting. By default, the value is https://zoom.us or https://zoom.com. |
Disabled, (empty) | String | General |
| DisableAutoLaunchSSO | Prevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL. | Disabled, 0 | Boolean | General |
| EnablePhoneLogin | Enables login with phone authentication. (A) | Disabled, 0 | Boolean | General |
| EnableAlipayLogin | Enables login with Alipay authentication. (A) | Disabled, 0 | Boolean | General |
| EnableQQLogin | Enables login with QQ authentication. (A) | Disabled, 0 | Boolean | General |
| EnableWeChatLogin | Enables login with WeChat authentication. (A) | Disabled, 0 | Boolean | General |
| SetAccountIDsRestrictedToJoin | Restrict the client to only join meetings hosted by the specified account IDs. (B) | Disabled, (empty) | String | General |
| SetEmailDomainsRestrictedToLogin | Set the email address domain that users can login with, each separated by "&". Example: zoom.us & hooli.com |
Disabled, (empty) | String | General |
| EnableCloudSwitch | Enable the option to switch between Zoom commercial (default) and Zoom for Gov. | Disabled, 0 | Boolean | General |
| EnforceSignInToJoin | Require users to be authenticated before joining a meeting with the desktop client. Authentication can take place through the the web portal, if joining through join URL. Note: This policy will interfere with joining meetings and webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well. |
Disabled, 0 | Boolean | General |
| EnforceAppSignInToJoin | Require authentication on the desktop client to join any meeting on the desktop client. Note: This policy will interfere with joining meetings and webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well. |
Disabled, 0 | Boolean | General |
| EnforceSignInToJoinForWebinar | Require users to be authenticated before joining a webinar with the desktop client. Authentication can take place through the the web portal, if joining through join URL. Note: This policy will interfere with joining webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well. |
Disabled, 0 | Boolean | General |
| EnforceAppSignInToJoinForWebinar |
Require authentication on the desktop client to join any webinar on the desktop client. Note: This policy will interfere with joining webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well. |
Disabled, 0 | Boolean | General |
| SetDevicePolicyToken | Require internal meeting authentication. (C) | Disabled, (empty) | String | General |
| General meeting and client options | ||||
| AutoEnableDualMonitor | Enable dual monitor mode. | Disabled, 0 | Boolean | Meetings |
| EnterFullScreenWhenJoinMeeting | When starting or joining a meeting, the meeting window will enter full-screen. | Disabled, 0 | Boolean | Meetings |
| AlwaysShowMeetingControls | Set use of Always show meeting controls setting. | Disabled, 0 | Boolean | Meetings |
| AlwaysUsePersonalMeetingID | Always use PMI for instant meetings. | Disabled, 0 | Boolean | General |
| DefaultUsePortraitView | Default to Portrait Mode upon opening Zoom. | Disabled, 0 | Boolean | General |
| ShowConfirmDialogWhenWebJoin | Require the Zoom client to displays a join meeting prompt, when users attempt to join a meeting from a URL. | Disabled, 0 | Boolean | Meetings |
| DisableClosedCaptioning | Disable the use of all closed captioning. | Disabled, 0 | Boolean | Meetings |
| DisableManualClosedCaptioning | Disable the use of manual, user-entered captioning. | Disabled, 0 | Boolean | Meetings |
| DisableQnA | Disable the use of Q&A in webinars. | Disabled, 0 | Boolean | Meetings |
| DisableMeetingReactions | Disable the use of Meeting reactions. | Disabled, 0 | Boolean | Meetings |
| DisableNonVerbalFeedback | Disable the use of Non-verbal feedback. | Disabled, 0 | Boolean | Meetings |
| DisableWebinarReactions |
Disable the use of Webinar Reactions. | Disabled, 0 | Boolean | Meetings |
| DisableSideCar |
Disable the use of Webinar Resources, which allows webinar hosts with the ability to link to external resources, such as newsletter sign-ups, learn more pages, and others. | Disabled, 0 | Boolean | Meetings |
|
DisableBroadcastBOMessage |
Disable the ability for the host to broadcast a message to all open breakout rooms. | Disabled, 0 | Boolean | Meetings |
| PromptConfirmWhenLeaveMeeting | Confirm before leaving a meeting. | Enabled, 1 | Boolean | Meetings |
| AlwaysShowConnectedTime | Enable the Show Meeting Timers setting. This setting allows for viewing the current duration of the meeting, or the remaining time, based on scheduled duration. | Disabled, 0 | Boolean | Meetings |
| MuteWhenLockScreen | Automatically mute the microphone and turn off video, when the screen is locked during a meeting. | Enabled, 1 | Boolean | Meetings |
| EnableRemindMeetingTime | Display reminder notifications for upcoming meetings. | Disabled, 0 | Boolean | Meetings |
| Video | ||||
| DisableReceiveVideo | Disable receiving video. | Disabled, 0 | Boolean | Meetings |
| DisableVideoCamera | Disable sending video. | Disabled, 0 | Boolean | Meetings |
| TurnOffVideoCameraOnJoin | Automatically turn off camera when joining a meeting. | Disabled, 0 | Boolean | Meetings |
| EnableHDVideo | Use HD video in meetings. | Disabled, 0 | Boolean | Meetings |
| EnableMirrorEffect | Enable mirroring of your video. Mirror effect only affects your view of your video. | Enabled, 1 | Boolean | Meetings |
|
HideSelfView |
Controls the use of the Hide Self View option. | Disabled, 0 | Boolean | Meetings |
| EnableFaceBeauty | Enable Touch up my appearance. | Disabled, 0 | Boolean | Meetings |
| SetFaceBeautyValue | Used in conjunction with EnableFaceBeauty, this allows you to set the exact intensity of the Touch up my appearance filter. | (Disabled), 25 | String | Meetings |
| EnableLightAdaption | Enable Adjust for low-light video setting. | Disabled, 0 | Boolean | Meetings |
| EnableAutoLightAdaption | Set mode of adjusting low-light video feature. This is dependent on the EnableLightAdaption option. 1 - Auto 0 - Manual |
Auto, 1 | Boolean | Meetings |
| SetLightAdaptionManualValue | Used in conjunction with EnableLightAdaption, this allows you to set the exact intensity of the low-light adjustment. | (Disabled), 20 | String | Meetings |
| AlwaysShowVideoPreviewDialog | Always show the video preview when joining a meeting. | Disabled, 0 | Boolean | Meetings |
| AutoHideNoVideoUsers | Hide non-video participants by default. | Disabled, 0 | Boolean | Meetings |
| EnableSpotlightSelf | Show self as the active speaker when speaking. | Disabled, 0 | Boolean | Meetings |
| Enable49video | Set max number of participants displayed in Gallery View to 49 participants per screen. | Disabled, 0 | Boolean | Meetings |
| EnableHardwareAccForVideoSend | Use hardware acceleration for video processing, when sending video. | Enabled, 1 | Boolean | General |
| EnableHardwareAccForVideoReceive | Use hardware acceleration for video processing, when receiving video. | Enabled, 1 | Boolean | General |
| EnableTemporalDeNoise | Enables de-noising of video | Enabled, 1 | Boolean | General |
| VideoRenderMethod | Set the video rendering method: 0 - Auto 1 - Direct3D11 Flip Mode 2 - Direct3D11 3 - Direct3D9 4 - GDI |
Auto, 0 | String | Meetings |
| SetVideoRenderingPostProcessing |
Adjust the use of video rendering post processing used by the desktop client on Windows. |
Auto, 0 | String | Meetings |
| SetVideoCapturingMethod | Adjust the method of video capture used by the desktop client on Windows. 0 - Auto 1 - Direct Show 2 - Media Foundation |
Auto, 0 | String | Meetings |
| EnableGPUComputeUtilization | Use hardware acceleration for video processing. | Enabled, 1 | Boolean | General |
| Audio | ||||
| DisableComputerAudio | Disable and remove the Computer Audio from the meeting audio options. | Disabled, 0 | Boolean | Meetings |
| SetUseSystemDefaultMicForVOIP | Use the default system microphone in Windows. | Disabled, 0 | Boolean | Meetings |
| SetUseSystemDefaultSpeakerForVOIP | Use the default system speakers in Windows. | Disabled, 0 | Boolean | Meetings |
| SetUseSystemCommunicationMicForVOIP | Use the system default communication microphone for computer audio. | Disabled, 0 | Boolean | Meetings |
| SetUseSystemCommunicationSpeakerForVOIP | Use the system default communication speaker for computer audio. | Disabled, 0 | Boolean | Meetings |
| AutoAdjustAudioSettings | Enable Automatically adjust microphone volume audio setting. | Enabled, 1 | Boolean | Meetings |
| SetSuppressBackgroundNoiseLevel | Set level of background noise suppression: 0 - Auto 1- Low 2 - Medium 3 - High |
Auto, 0 | String | Meetings |
| EnableOriginalSound | Enable the Original sound for musicians audio profile for the meeting audio input. | Enabled, 1 | Boolean | Meetings |
| AutoJoinVoIP | Automatically connect audio with computer audio when joining a meeting. | Disabled, 0 | Boolean | Meetings |
| MuteVoIPWhenJoinMeeting | Mute computer audio microphone when joining a meeting. | Disabled, 0 | Boolean | Meetings |
| EnableHIDControl | Enables HID control of USB devices by the Zoom client. | Enabled, 1 | Boolean | Meetings |
| SetAudioSignalProcessType | Set audio signal processing for Windows audio devices: 0 - Auto 1 - Off 2 - On |
Auto, 0 | String | Meetings |
| Screen sharing | ||||
| DisableShareScreen | Disable the ability to share your screen in meetings and webinars. Note: This does not disable incoming screen sharing from other participants. |
Disabled, 0 | Boolean | Meetings |
| DisableAeroModeDuringShareScreen | Disable Aero mode when screen sharing on Windows 7 system. | Enabled, 1 | Boolean | Meetings |
| EnterFullScreenWhenViewingSharedScreen | When viewing shared content, the content window automatically goes fullscreen. | Enabled, 1 | Boolean | Meetings |
| FitContentWhenViewingSharedScreen | When viewing shared content, the content window automatically adjusts to fit the viewer's screen. | Enabled, 1 | Boolean | Meetings |
| ShowZoomWinWhenSharing | Show Zoom windows when screen sharing. | Disabled, 0 | Boolean | Meetings |
| EnableSplitScreen | Use Side-by-Side mode when viewing shared content. | Disabled, 0 | Boolean | Meetings |
| DisableAnnotation | Disable and remove the ability to annotate over shared screen. | Disabled, 0 | Boolean | Meetings |
| EnableShareAudio | Enable the Share computer audio option when sharing. | Disabled, 0 | Boolean | Meetings |
| EnableShareVideo | Enable the Optimize for video clip option when sharing. | Disabled, 0 | Boolean | Meetings |
| DisableWhiteBoard | Disable Classic Whiteboard feature. | Disabled, 0 | Boolean | Meetings |
| DisableInMeetingWhiteBoard | Disable the Zoom Whiteboard feature in meetings and webinars. | Disabled, 0 | Boolean | Meetings |
| DisableSlideControl | Disable Slide Control feature. | Disabled, 0 | Boolean | Meetings |
| DisableDesktopShare | Disable the option to share your desktop when screen sharing. | Disabled, 0 | Boolean | Meetings |
| DisableRemoteControl | Disable Remote Control feature. | Disabled, 0 | Boolean | Meetings |
| DisableRemoteSupport | Disable Remote Support feature. | Enabled, 1 | Boolean | Meetings |
| ControlAllAppsWhenRemoteControl | Allow remote control of all applications. | Disabled, 0 | Boolean | Meetings |
| EnableShareClipboardWhenRemoteControl | Allow clipboard access during remote control. | Disabled, 0 | Boolean | Meetings |
| PresentInMeetingOption | Set sharing option when sharing your screen within a meeting: 0 - Show all sharing options 1 - Automatically share desktop |
Show all sharing options, 0 | Boolean | Meetings |
| EnableDoNotDisturbInSharing | Silence system notifications when sharing desktop. | Enabled, 1 | Boolean | Meetings |
| LegacyCaptureMode | Disable GPU acceleration. | Disabled, 0 | Boolean | Meetings |
| ScreenCaptureMode | Set the screen capture mode: 0 - Auto 1 - Legacy operating systems 2 - Share with window filtering 3 - Advanced share with window filtering 4 - Advanced share without window filtering |
Auto, 0 | String | Meetings |
| EnableHardwareOptimizeVideoSharing | Use hardware acceleration to optimize video sharing. | Enabled, 1 | Boolean | Meetings |
| Zoom Phone | ||||
| HidePhoneInComingCallWhileInMeeting | Prevent incoming call notifications while in a meeting. | Disabled, 0 | Boolean | Meetings |
| EnableLaunchApp4IncomingCalls | Control the Launch an external app or a URL for incoming calls option in the client. This must be used in coordination with SetCommand4IncomingCalls, so that the URL can be configured as well. |
Disabled, 0 | Boolean | Meetings |
| SetCommand4IncomingCalls | Set the URL used when the client receives an incoming call. This must be used in coordination with EnableLaunchApp4IncomingCalls. |
Disabled, (empty) | String | Meetings |
| ClickToCallDefault |
Choose which Zoom service is used when clicking a phone number to place a call. 0 - Zoom Phone |
Zoom Phone, 0 | String | Meetings |
| In-meeting Chat | ||||
| DisableMeetingChat | Disable in-meeting chat. | Disabled, 0 | Boolean | Meetings |
| DisableMeetingFileTransfer | Disable in-meeting file transfer. (sending or receiving) | Disabled, 0 | Boolean | Meetings |
| DisableMeeting3rdPartyFileStorage | Disable in-meeting 3rd party file transfer. | Disabled, 0 | Boolean | Meetings |
| Zoom Apps | ||||
| DisableZoomApps | Hide the Zoom Apps button. | Disabled, 0 | Boolean | General |
|
DisableZoomAppsGuestAccess |
Control the ability for users to utilize a Zoom App in Guest mode. | Disabled, 0 | Boolean | General |
| Background and Filters | ||||
| DisableVirtualBkgnd | Disable Virtual Background feature. | Disabled, 0 | Boolean | Meetings |
| DisableVideoFilters | Disable Video filters feature. | Disabled, 0 | Boolean | Meetings |
| EnableAutoReverseVirtualBkgnd | Require post-meeting virtual background auto-reversal. | Disabled, 0 | Boolean | Meetings |
| Recording | ||||
| RecordingFilePath | Set the default recording location for local recordings. Note: Windows System Variables, such as %appdata% or %username%, are supported as of 5.13.0. |
User\Document | String | Meetings |
| DisableCloudRecording | Disable recording to the cloud. | Disabled, 0 | Boolean | Meetings |
| DisableLocalRecording | Disable recording locally on the device. | Disabled, 0 | Boolean | Meetings |
| NotifyCMRAvailable |
Control the desktop client setting Show notifications when a new recording is available. | Enabled, 1 | Boolean | Meetings |
| Zoom Room and Room System calling | ||||
| DisableDirectShare | Disable direct share with Zoom Rooms option. | Disabled, 0 | Boolean | Meetings |
| EnableStartMeetingWithRoomSystem | Display the Call Room System button on the home screen of the desktop client. | Disabled, 0 | Boolean | Meetings |
| AppendCallerNameForRoomSystem | Display the caller name for room systems being invited to Zoom meeting. | Disabled, 0 | Boolean | Meetings |
| PresentToRoomWithAudio | Share sound when screen sharing to a Zoom Room. | Enabled, 1 | Boolean | Meetings |
| PresentToRoomOptimizeVideo | Optimize screen sharing for video clip when sharing to a Zoom Room. | Enabled, 1 | Boolean | Meetings |
| PresentToRoomOption | Set sharing option when sharing to a Zoom Room: 0 - Show all sharing options 1 - Automatically share desktop |
Automatically share desktop, 1 | Boolean | Meetings |
| Zoom Chat | ||||
| DisableLinkPreviewInChat | Disable link previews. | Disabled, 0 | Boolean | Chat |
| SetMessengerDoNotDropThread | Move messages with new replies to the bottom of the chat/channel. | Enabled, 1 | Boolean | Chat |
| ShowProfilePhotosInChat | Controls if user profile pictures are shown in Zoom Chat. | Enabled, 1 | Boolean | Chat |
| ShowVoiceMessageButton | Allow use of the Send audio message option. | Enabled, 1 | Boolean | Chat |
| ShowVideoMessageButton | Allow use of the Send video message option. | Enabled, 1 | Boolean | Chat |
| AlwaysShowIMNotificationBanner | Show notifications for new Zoom Chat messages until dismissed. | Disabled, 0 | Boolean | Chat |
| PlaySoundForIMMessage | Play audio notifications when an IM message is received. | Enabled, 1 | Boolean | Chat |
| ShowIMMessagePreview | Allow message previews in system notifications when a chat message is received. | Enabled, 1 | Boolean | Chat |
| MuteIMNotificationWhenInMeeting | Mute chat system notifications when in a meeting. | Enabled, 1 | Boolean | Chat |
| Miscellaneous | ||||
| EmbedUserAgentString | Embed a specified user agent string for all HTTP requests from Zoom client. | Disabled, use default user agent string | String | General |
| EmbedDeviceTag | Embed a specified device tag string for all HTTP requests from Zoom client application. This string will be appended to the head of the regular HTTP requests. | Disabled, (empty) | String | General |
| EnableAutoUploadDumps | Automatically send dump files to Zoom to improve services. | Disabled, 0 | Boolean | General |
| EnableAutoUploadMemlogs | Automatically send critical-failure-logs to Zoom to improve services. | Disabled, 0 | Boolean | General |
| Disable3rdModuleVerify | Disables the check of the signature of the third-party library. | Disabled, 0 | Boolean | General |
| IntegrateZoomWithOutlook | Show Zoom contact status in Outlook, and sets Zoom as the default chat, meeting, and phone app in Outlook. | Disabled, 0 | Boolean | General |
| SetAccEventsOptions | Set what alerts will be read by a screen reader. The following options are available and must be entered as the combined numeric value of all the alerts you want in the string: 1 - IM chat received 2 - Participant joined/left meeting 4 - Participant joined/left waiting room 8 - Audio muted/unmuted by host 16 - Video stoped by host 32 - Screen sharing started stoped by participant 64 - Recording permission granted revoked 128 - Public meeting chat received 256 -Private meeting chat received 512 - File uploaded to in-meeting chat 1024 - Closed captioning available 2048 - Closed captioning typing privilege granted/revoked 4096 - Host controls granted/revoked 8192 - Co-host controls granted/revoked 16384 - Remote control permission granted/revoked 32768 - Livestream started/stopped 65536 - Participant raised/lowered hand 131072 - Q&A question received 262144 - Q&A answer received 524288 - Webinar role changed to panelist 1048576 - Webinar role changed to attendee |
No Value (all alerts will be read) | String | |
| Intercloud Policies | ||||
| OverrideEnforceSigninIntercloud | Override the following policies to allow users to join a Zoom meeting or webinar hosted on the Zoom for Government Cloud (ZfG Cloud) without the need to authenticate:
|
Disabled, 0 | Boolean |
Meetings |
|
Intercloud_DisableAllFeatures |
Disables all features except for audio and video for meetings hosted on the ZfG cloud. | Disabled, 0 | Boolean | Meetings |
|
Intercloud_DisableMeetingChat |
Disables the use of in-meeting chat on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean | Meetings |
|
Intercloud_DisableShareScreen |
Disables the local ability to share screen on meetings hosted on the ZfG Cloud. This does not affect others' ability to shared content. |
Disabled, 0 | Boolean | Meetings |
|
Intercloud_DisableMeetingReactions |
Disables the use of meeting reactions on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean | Meetings |
|
Intercloud_DisableMeetingFileTransfer |
Disables the use of file transfers through in-meeting chat on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean | Meetings |
|
Intercloud_DisableAnnotation |
Disables the local ability to annotate on shared content in meetings hosted on the ZfG Cloud. This does not affect others' ability to annotate. |
Disabled, 0 | Boolean | Meetings |
| Intercloud_DisableWhiteBoard | Disables the use of in-meeting whiteboarding on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean | Meetings |
| Intercloud_DisableLocalRecording | Disabled by default, this option disables the ability to locally record meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean | Meetings |
| Intercloud_DisableClosedCaptioning | Disabled by default, this option disables the use of captioning features on meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean | Meetings |
| Intercloud_DisableRemoteControl | Disabled by default, this option disables the remote control of shared screens in meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean | Meetings |
|
Intercloud_DisableMeetingPolls |
Disabled by default, this option disables the use of polling in meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean | Meetings |
|
Intercloud_DisableComputerAudio |
Disabled by default, this option disables the use of computer audio for connecting to meetings hosted on the ZfG Cloud. | Disabled, 0 | Boolean | Meetings |
| Zoom Mesh | ||||
| EnableMeshNetworking |
Control client use of Zoom Mesh, even if deployed on your account and local network. |
Enabled, 1 | Boolean | Meetings |
|
MeshMulticastIP |
When utilizing Zoom Mesh, this policy allows admins to specify a valid IP address to be a UDP multicast IP for Zoom apps to declare themselves and detect each other in their local sub-network (255.255.255.0). Admins can choose other IP addresses within the range of [224.0.0.1, 239.255.255.255]. |
224.0.0.1, <empty> | String | Meetings |
|
MeshMulticastPort |
When utilizing Zoom Mesh, this policy allows an admin to specify a valid port to be used as the UDP multicast port to communicate with other Zoom Mesh nodes on the network. | Port 36699, 0 | String | Meetings |
|
MeshListenPortRange |
When utilizing Zoom Mesh, this policy allows a valid port range to be used to set up listen sockets for connection requests between Mesh parents and children nodes. The nodes will also use this range to send signals and media data. | 18801-19800, <empty> | String | Meetings |
|
EnableGuestMesh |
When utilizing Zoom Mesh, this allows external users (not on your account) to join a Webinar through the local Zoom Mesh-enabled network. Other requirements must be met, such as the device having the minimum supported client version for Mesh connections and the associated account setting in the web portal also enabled. | Disabled, 0 | Boolean | Meetings |
Notes:
- (A) These options are only available for devices in the China region.
- (B) Please have an account admin or owner contact Zoom Support to acquire your account ID.
- (C) Please have an account admin or owner contact Zoom Support to have this enabled for use. The owner will also need to edit a role to have view/edit access to Device Policy Management. The required token can then be retrieved from the Device Policy Management page.
- FirewallPortStart and FirewallPortEnd need to be configured together. Zoom does not recommend enabling one without enabling the other.
Important notes regarding AutoUpdate
The EnableSilentAutoUpdate or AlwaysCheckLatestVersion options are no longer supported.
Managing Auto Update on versions between 5.8.6 and 5.10.1 should be done with the ZoomAutoUpdate and SetUpdatingChannel option below. This allows for automatic download and installation of updates, based on Slow and Fast release cadences, to best suit your needs.
For versions 5.10.3 and higher, refer to the Enterprise Auto Update policies.
Configuration options for Zoom Rooms
The following Registry option can be found under: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Rooms\General
| Registry Item | Description | Default state and value |
|---|---|---|
|
EnableSSLVerification |
The client will verify the server certificate | Disabled, 0 |
Zoom Community
Join the 100K+ other members in the Zoom Community! Login with your Zoom account credentials and start collaborating.