Help Center
Installing with an Active Directory Administrative Template or registry keys, administrators can lock certain features and settings upon deployment of Zoom. Administrators can disable features such as screen sharing or video sharing for all meetings that user joins, regardless of who is hosting the meeting. Active Directory admins can configure Zoom settings and features through Group Policy at any time. Zoom does not need to be installed on the computer for these settings to be configured. Zoom can be downloaded at a later time and the configuration will apply the first time Zoom is launched. The settings apply whether the standard installer is used or the MSI installer is used.
Below are the registry items and their associated policies, as well as the default values in the administrative templates.
The Zoom Desktop application, as well as the Zoom Rooms application, can also be deployed and configured via command-line or Intune as well.
Note: To ensure compatibility with the policies listed below, we recommend updating to the latest version of the Windows Desktop client or Zoom Room software.
This article covers:
Prerequisites for using Group Policy options
- MSI version of the Windows Desktop Client
- Zoom Rooms for PC
Note: Some of the switches listed below require the latest version of the Zoom IT Installer.
Templates
The following downloads contain the administrative templates, as well as registry files for specific versions of Zoom:
- Windows Desktop Client
- Policies for version 5.0.0
- Policies for version 5.0.2
- Policies for version 5.1.1
- Policies for version 5.2.0
- Policies for version 5.3.0
- Policies for version 5.4.0
- Policies for version 5.4.3
- Policies for version 5.4.6
- Policies for version 5.4.9
- Policies for version 5.5.0
- Policies for version 5.6.0
- Policies for version 5.6.3
- Policies for version 5.6.6
- Policies for version 5.6.7
- Policies for version 5.7.3
- Policies for version 5.7.6
- Policies for version 5.8.0
- Policies for version 5.8.3
- Windows Zoom Room Client
Note: Each download includes .ADM and .ADMX files. If using the .ADM files, the polices will be located under Classic Administrative Templates.
Active Directory Administrative Template Configuration
- Login to your Active Directory server as an admin.
- Click Start, choose Administrative Tools, then Active Directory Users and Computers.
- Expand the domain where you would like to set the group policy.
- Right-click on the domain where you would like to set the group policy, click Properties, then Group Policy.
- Create a Group Policy Object and name it Zoom.
- Select the newly created Group Policy Object and click Edit.
- Under the Computer Configuration, right click on Administrative Templates.
- Choose Add/Remove Templates.
- Browse and find the Administrative Template downloaded from this article. Click Open.
- Close the Add/Remove Templates window.
- Under Computer Configuration then Administrative Templates, you should now have the option for Zoom.
- Double click on the Zoom folder to open a list of subfolders: General Settings, Chat Settings, and Meeting Settings.
- Double click on one of the subfolders to view settings and double click on the individual setting to view more information and enable or disable it.
Desktop Client Settings
General
The following Registry options can be found under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Meetings\General.
| Registry Item | Policy | Default Value |
| AlwaysUsePersonalMeetingID | Always use personal meeting ID to start meeting for instant meetings | Disabled |
| AutoStartAfterReboot | Auto start client after reboot | Disabled |
| AutoStartInSystemTray | Auto start client after reboot in the system tray | Disabled |
| BlockUntrustedSSLCert | The client will block connections to untrusted SSL certificates | Enabled |
| CloseToSystemTray | The client will minimize to system tray and not show on task-bar when closed | Enabled |
| DisableCreatingDesktopShortcut |
Disable creating a desktop shortcut |
Disabled |
| DisableFacebookLogin | Disable login with Facebook OAuth | Disabled |
| DisableGoogleLogin | Disable login with Google OAuth | Disabled |
| DisableLoginWithSSO |
Disable login with SSO |
Disabled |
| DisableLoginWithEmail | Disable login with email and password | Disabled |
| DisableKeepSignedInWithSSO | Disable keep signed in if signing in with SSO | Disabled |
| DisableKeepSignedInWithGoogle | Disable keep signed in if signing in with Google | Disabled |
| DisableKeepSignedInWithFacebook | Disable keep signed in if signing in Facebook | Disabled |
| EnableClientAutoUpdate | Enable updates through the client by users. When disabled, the Check for Updates button is also hidden. |
EXE: Enabled MSI: Disabled |
| EnableSilentAutoUpdate | Allows the desktop client to silently check for updates and install the latest stable version. This option requires AutoUpdate option to be enabled, and will fail if not enabled. |
Enabled |
| AlwaysCheckLatestVersion | Allows the desktop client to check for updates and install the latest available version. This option requires AutoUpdate option to be enabled, and will fail if not enabled. |
Disabled |
| SetUpdatingChannel |
Allows the control of the cadence of updates applied to the desktop client. Slow (0): fewer updates and better stability |
Slow (0) |
| ForceLoginWithSSO | Force login with SSO only | Disabled |
| EnforceSignInToJoin | Forces users to be signed in before joining a meeting from the app. Users can be signed-in on the web portal when joining through join URL. | Disabled |
| EnforceAppSignInToJoin |
Require the client to be logged-in to a Zoom account before joining any meeting or webinar |
Disabled |
| SetAccountIDsRestrictedToJoin |
Set account IDs that client is restricted to join a meeting hosted by specific Account ID numbers (separated by ",") Example: 11111,22222 |
No Value |
| SetEmailDomainsRestrictedToLogin |
Restrict email domains that the client can log in with (separated by "&") Example: abc.com & zoom.us |
No Value |
| SetSSOURL |
Set default SSO URL for a client login Example: yourcompany.zoom.us |
No Value |
| EnableEmbedBrowserForSSO | Uses embed browser in the Windows client for SSO | Disabled |
| ForceSSOURL | Set and lock the default SSO URL for a client login For example, hooli.zoom.us would be set as ForceSSOUrl=hooli |
No Value |
| DisableAutoLaunchSSO |
Prevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL. | Disabled |
|
KeepSignedIn |
This will keep the user signed into the client when it is restarted | Disabled |
|
SetWebDomain |
Sets the web domain for logging in or joining a meeting, by default the values is https://zoom.us or https://zoom.com | No value |
| DefaultUsePortraitView | Default to Portrait Mode upon opening Zoom | Disabled |
|
ProxyPAC |
Set proxy server to client with PAC URL | No Value |
|
ProxyServer |
Set a proxy server for the client as named proxy. Example: server:port |
No Value |
|
ProxyBypass |
Set proxy bypass rule for the client | No Value |
| EnablePhoneLogin | Enables logging in via phone authentication | No Value |
| EnableAlipayLogin | Enables logging in via Alipay authentication | No Value |
| EnableQQLogin | Enables logging in via QQ authentication | No Value |
| EnableWeChatLogin | Enables logging in via WeChat authentication | No Value |
| EmbedUserAgentString | Set to embed one specified user agent string for all HTTP requests from Zoom client application | No Value |
| EmbedDeviceTag | Set to embed one specified device tag string for all HTTP requests from Zoom client application | No Value |
| EnableAutoUploadDumps | Automatically send dump logs, when there is a critical-failure issue | Disabled |
|
EnableTemporalDeNoise |
Enables de-noising of video | Enabled |
|
EnableGPUComputeUtilization |
Allows the client to utilize GPU acceleration for video processing | Enabled |
|
EnableHardwareAccForVideoSend |
Allows the client to utilize GPU acceleration for sending video | Enabled |
| EnableHardwareAccForVideoReceive | Allows the client to utilize GPU acceleration for receiving video | Enabled |
| ShareSessionDisableUDP | Forces Screen Sharing traffic over TCP instead of UDP. | Disabled |
| IntegrateZoomWithOutlook | Show Zoom contact status in Outlook, and sets Zoom as the default chat, meeting, and phone app in Outlook. | Disabled |
| SetAccEventsOptions |
Sets what alerts will be read by a screen reader. The following options are available (enter the numeric value in the string):
|
No Value (all alerts will be read) |
| DisableDirectConnectionPK | Will disable the direct connection PK request by the Zoom client | Disabled |
| DisableDirectConnection2Web |
Will disable all direct connections to Zoom web service. | Disabled |
| EnableAutoUploadMemlogs | Zoom client will send critical-failure-logs to Zoom backend to improve the service. | Disabled |
| Disable3rdModuleVerify | Disables the check of the signature of the third-party library. | Disabled |
| SetDevicePolicyToken |
Set device policy's token from web settings | No Value |
| IgnoreBandwidthLimits |
Ignore bandwidth limited set on web settings. Useful for exceptions. | Disabled |
| SetNoRevocationCheckUrls | Allow specific URLs to be trusted and bypass the untrusted certificate prompt if the certificate is revoked. Multiple domains should be separated by ";", for example "hooli.com;hooli.org" | No Value |
| DisableZoomApps | Hide Zoom Apps quick launch button in the Zoom interface. | Disabled |
*Note: FirewallPortStart and FirewallPortEnd need to be configured together, Zoom does not recommend enabling one without enabling the other.
Meetings
The following Registry options can be found under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Meetings\Meetings.
| Registry Item | Policy | Default Value |
| AlwaysShowConnectedTime | The client will show meeting connected time | Disabled |
| AlwaysShowMeetingControls |
The client will always show meeting controls |
Disabled |
| AutoAdjustAudioSettings |
The client will adjust audio settings automatically |
Enabled |
| AutoEnableDualMonitor |
Enable dual monitor if the system supports |
Disabled |
| AutoHideNoVideoUsers |
The client will hide users with video turned off in gallery View |
Disabled |
| AutoJoinVoIP | Auto-connect audio with VoIP when joining a meeting | Disabled |
| ControlAllAppsWhenRemoteControl |
All applications can be controlled during remote control session |
Disabled |
| DisableAeroModeDuringShareScreen | Disable Aero mode when screen sharing on Windows 7 system | Enabled |
| DisableAnnotation |
The client will disable and hide the ability to annotate over shared screen |
Disabled |
| DisableCloudRecording | The client will disable and hide the cloud recording feature | Disabled |
| DisableLocalRecording | The client will disable and hide the local recording feature | Disabled |
| DisableMeetingChat | The client will disable and hide the in-meeting chat feature | Disabled |
| DisableMeetingFileTransfer |
Client will disable and hide the in-meeting computer file-transfer feature. |
Disabled |
| DisableMeeting3rdPartyFileStorage |
Client will disable and hide the in-meeting 3rd party file transfer options. |
Disabled |
| DisableReceiveVideo | The client will disable and hide the ability to receive video | Disabled |
| DisableShareScreen | The client will disable and hide the Share Screen feature | Disabled |
| DisableVideoCamera | The client will disable and hide the ability to send video | Disabled |
| EnableHDVideo | The client will capture and send camera video in HD 720p format | Disabled |
| EnterFullScreenWhenJoinMeeting |
The client will automatically enter full-screen mode when joining a meeting |
Disabled |
| EnterFullScreenWhenViewingSharedScreen | The client will enter full-screen mode when viewing the shared screen | Enabled |
| FitContentWhenViewingSharedScreen | The client will resize content to fit the window when viewing the shared screen | Enabled |
| MuteVoIPWhenJoinMeeting | The client will mute VoIP when joining a meeting | Disabled |
| PromptConfirmWhenLeaveMeeting | The client will prompt confirmation when leaving a meeting | Enabled |
| RecordingFilePath |
Set path for local meeting recording files Example C:\Users\User\MyZoomRecordings |
User\Document |
| TurnOffVideoCameraOnJoin | Turn off video camera when joining the meeting | Disabled |
| EnableMirrorEffect | The client will enable mirror effect of your video camera | Enabled |
| EnableHIDControl | The client will enable HID audio device control | Enabled |
| DisableComputerAudio | The client will disable computer audio | Disabled |
| EnableSplitScreen | The client will enable side-by-side mode | Disabled |
| ShowConfirmDialogWhenWebJoin | Client will notify an user when auto-joining a meeting from website | Disabled |
| DisableRemoteControl | During screen sharing, the person who is sharing is not able to allow others to control the shared content. | Disabled |
| DisableRemoteSupport | Disallow meeting host to provide 1:1 remote support to another participant. This option depends on breakout room settings. | Enabled |
| DisableClosedCaptioning |
Disable the use of closed captioning |
Disabled |
| DisableQnA |
Disable the use of Q&A in webinars |
Disabled |
| DisableSlideControl |
Disable the use of slide control |
Disabled |
| AlwaysShowVideoPreviewDialog | Always show video preview dialog when joining a video meeting | Disabled |
| DisableVirtualBkgnd | Disable virtual background for windows and mac | Disabled |
| EnableFaceBeauty | Enable touch up my appearance | Enabled |
| DisableWhiteBoard | Disable whiteboard feature | Disabled |
| EnableShareAudio | Enable share audio feature | Disabled |
| EnableShareVideo | Enable share video feature | Disabled |
| DisableDirectShare | Disable to share with Zoom Rooms | Disabled |
| DisableDesktopShare | Disable share desktop feature | Disabled |
| DisableAudioOverProxy | Disable audio media stream over a proxy server | Disabled |
| DisableVideoOverProxy | Disable video media stream over proxy server | Disabled |
| DisableSharingOverProxy | Disable screen sharing media stream over a proxy server | Disabled |
| SetUseSystemDefaultMicForVOIP | When enabled, Zoom will use the default microphone set in Windows | Disabled |
| SetUseSystemDefaultSpeakerForVOIP | When enabled, Zoom will use the default speaker set in Windows | Disabled |
| SetUseSystemCommunicationMicForVOIP | Set to use the system default communication microphone for VoIP | Disabled |
| SetUseSystemCommunicationSpeakerForVOIP | Set to use the system default communication speaker for VoIP | Disabled |
| BandwidthLimitUp |
Restricts maximum uplink traffic bandwidth from the Zoom client Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. |
No value (all values in Kbps) |
| BandwidthLimitDown | Restricts maximum downlink traffic bandwidth from the Zoom client Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. |
No value (all values in Kbps) |
| EnableIndependentDataPort |
If enabled, the client will use the following ports for media transmission: AUDIO: 8803 |
Disabled |
| LegacyCaptureMode | Disables GPU acceleration | Disabled |
| EnableStartMeetingWithRoomSystem | Displays the Call Room System button on the home screen of the Zoom client | Disabled |
| EnableStartMeetingWithRoomSystem | Client will optimize screen sharing for video clip when sharing directly to a Zoom Room. | Enabled |
| PresentToRoomOptimizeVideo |
Set sharing option when sharing directly to a Zoom Room. 1 - Automatically share desktop |
1 |
| PresentToRoomOption |
Set sharing option when sharing directly to a Zoom Room within a meeting. 1 - Automatically share desktop |
0 |
| ShowZoomWinWhenSharing | Displays the Zoom meeting window, even when screen sharing | Disabled |
| MuteWhenLockScreen | When the computer is locked, if the Zoom client is in a meeting, it will automatically mute the microphone and turn off camera | Disabled |
| EnableOriginalSound | Automatically enables the Original Audio setting for the microphone | Disabled |
| AppendCallerNameForRoomSystem | If enabled the Zoom app will display the caller name for Room system | Disabled |
| EnableElevateForAdvDSCP | If enabled, the Zoom app will start an elevated video process to support advanced DSCP marks | Disabled |
| EnableSpotlightSelf | Enables spotlight of your video when speaking | Disabled |
| Enable49video | Allows Gallery View to display up to 49 participants per screen | Disabled |
| EnableRemindMeetingTime | Enables a reminder for upcoming meetings | Disabled |
| VideoRenderMethod |
Sets the specified video rendering method using the following string variables: 0 - Auto |
0 |
| PresentToRoomOptimizeVideo |
The client will optimize screen sharing for video clip when user shares directly to a Zoom Room. |
Enabled |
| PresentToRoomOption |
Set specified sharing option when a user shares directly to a Zoom Room: 0 - Show all sharing options |
1 |
| PresentInMeetingOption |
Set specified sharing option when user shares screen in a meeting:
0 - Show all sharing options |
1 |
| DisableVideoFilters |
Set to disable virtual filters |
Disabled |
| ScreenCaptureMode |
Set the specified screen capture mode: 0 - Auto |
0 |
| HidePhoneInComingCallWhileInMeeting | Enable to prevent incoming call notifications while in a meeting. | Disabled |
| EnableShareClipboardWhenRemoteControl | Enable to allow clipboard access during remote control sessions. | Disabled |
| EnableDoNotDisturbInSharing | Set to silence system notifications when sharing desktop | Enabled |
| SetSuppressBackgroundNoiseLevel |
Set noise suppression level Auto - 0 |
0 (Auto) |
| SetAudioSignalProcessType |
Set audio signal processing for Windows audio devices Auto - 0 |
0 (Auto) |
Chat
The following Registry options can be found under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Meetings\chat.
| Registry Item | Policy | Default Value |
|
DisableLinkPreviewInChat |
The client will disable and hide link preview feature in chat | Disabled |
|
SetMessengerDoNotDropThread |
Moves messages with new replies to the bottom of the chat window | Disabled |
| ShowVoiceMessageButton
|
Displays the Voice to Text option in chat controls | Enabled |
| AlwaysShowIMNotificationBanner | Show notification banner on screen until dismissed | Disabled |
| PlaySoundForIMMessage | Control the audio notifications when an IM message is received | Enabled |
| ShowIMMessagePreview | Control if the message previews in system notifications when an IM message is received | Enabled |
| MuteIMNotificationWhenInMeeting | Control if IM message system notifications are muted when in a meeting | Enabled |
Zoom Rooms
The following Registry options can be found under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Rooms\General.
| Registry Item | Policy | Default Value |
|
EnableSSLVerification |
The client will verify the server certificate | Enabled |
