Group Policy Options for the Windows desktop client and Zoom Rooms – Zoom Help Center

Overview

Installing with an Active Directory Administrative Template or registry keys, administrators can lock certain features and settings upon deployment of Zoom. Administrators can disable features such as screen sharing or video sharing for all meetings that user joins, regardless of who is hosting the meeting. Active Directory admins can configure Zoom settings and features through Group Policy at any time. Zoom does not need to be installed on the computer for these settings to be configured. Zoom can be downloaded at a later time and the configuration will apply the first time Zoom is launched. The settings apply whether the standard installer is used or the MSI installer is used.

Below are the registry items and their associated policies, as well as the default values in the administrative templates.

The Zoom Desktop application, as well as the Zoom Rooms application, can also be deployed and configured via command-line or Intune as well.

Note: To ensure compatibility with the policies listed below, we recommend updating to the latest version of the Windows Desktop client or Zoom Room software.

This article goes over:

Active Directory Administrative Template Configuration
Templates
Desktop Client Settings
- General
- Meetings
- Chat
Zoom Rooms

Prerequisites

MSI version of the Windows Desktop Client
Zoom Rooms for PC

Note: Some of the switches listed below require the latest version of the Zoom IT Installer.

Templates

The following downloads contain the administrative templates, as well as registry files for specific versions of Zoom:

Windows Desktop Client
Windows Zoom Room Client
- Zoom Room GPO Template
- Zoom Room registry template

Note: Each download includes .ADM and .ADMX files. If using the .ADM files, the polices will be located under Classic Administrative Templates.

Active Directory Administrative Template Configuration

Login to your Active Directory server as an admin.
Click Start, choose Administrative Tools, then Active Directory Users and Computers.
Expand the domain where you would like to set the group policy.
Right-click on the domain where you would like to set the group policy, click Properties, then Group Policy.
Create a Group Policy Object and name it Zoom.
Select the newly created Group Policy Object and click Edit.
Under the Computer Configuration, right click on Administrative Templates.
Choose Add/Remove Templates.
Browse and find the Administrative Template downloaded from this article. Click Open.
Close the Add/Remove Templates window.
Under Computer Configuration then Administrative Templates, you should now have the option for Zoom.
Double click on the Zoom folder to open a list of subfolders: General Settings, Chat Settings, and Meeting Settings.
Double click on one of the subfolders to view settings and double click on the individual setting to view more information and enable or disable it.

Desktop Client Settings

General

The following Registry options can be found under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Meetings\General.

Registry Item	Policy	Default Value
AlwaysUsePersonalMeetingID	Always use personal meeting ID to start meeting for instant meetings	Disabled
AutoStartAfterReboot	Auto start client after reboot	Disabled
AutoStartInSystemTray	Auto start client after reboot in the system tray	Disabled
BlockUntrustedSSLCert	The client will block connections to untrusted SSL certificates	Disabled
CloseToSystemTray	The client will minimize to system tray and not show on task-bar when closed	Enabled
DisableCreatingDesktopShortcut	Disable creating a desktop shortcut	Disabled
DisableFacebookLogin	Disable login with Facebook OAuth	Disabled
DisableGoogleLogin	Disable login with Google OAuth	Disabled
DisableLoginWithSSO	Disable login with SSO	Disabled
DisableLoginWithEmail	Disable login with email and password	Disabled
DisableKeepSignedInWithSSO	Disable keep signed in if signing in with SSO	Disabled
DisableKeepSignedInWithGoogle	Disable keep signed in if signing in with Google	Disabled
DisableKeepSignedInWithFacebook	Disable keep signed in if signing in Facebook	Disabled
EnableClientAutoUpdate	Enable updates through the client by users. When disabled, the Check for Updates button is also hidden.	EXE: Enabled MSI: Disabled
EnableSilentAutoUpdate	Allows the desktop client to silently check for updates and install the latest stable version. This option requires AutoUpdate option to be enabled, and will fail if not enabled.	Disabled
AlwaysCheckLatestVersion	Allows the desktop client to check for updates and install the latest available version. This option requires AutoUpdate option to be enabled, and will fail if not enabled.	Disabled
ForceLoginWithSSO	Force login with SSO only	Disabled
EnforceAppSignInToJoin	Require the client to be logged-in to a Zoom account before joining any meeting or webinar	Disabled
SetAccountIDsRestrictedToJoin	Set account IDs that client is restricted to join a meeting hosted by specific Account ID numbers (separated by ",") Example: 11111,22222	No Value
SetEmailDomainsRestrictedToLogin	Restrict email domains that the client can log in with (separated by "&") Example: abc.com & zoom.us	No Value
SetSSOURL	Set default SSO URL for a client login Example: yourcompany.zoom.us	No Value
EnableEmbedBrowserForSSO	Uses embed browser in the Windows client for SSO	Disabled
ForceSSOURL	Set and lock the default SSO URL for a client login	No Value
KeepSignedIn	This will keep the user signed into the client when it is restarted	Disabled
SetWebDomain	Sets the web domain for logging in or joining a meeting, by default the values is https://zoom.us or https://zoom.com	No value
DefaultUsePortraitView	Default to Portrait Mode upon opening Zoom	Disabled
ProxyPAC	Set proxy server to client with PAC URL	No Value
ProxyServer	Set a proxy server for the client as named proxy. Example: server:port	No Value
ProxyBypass	Set proxy bypass rule for the client	No Value
EnforceSignInToJoin	Forces users to be signed in before joining a meeting from the app	No Value
EnablePhoneLogin	Enables logging in via phone authentication	No Value
EnableAlipayLogin	Enables logging in via Alipay authentication	No Value
EnableQQLogin	Enables logging in via QQ authentication	No Value
EnableWeChatLogin	Enables logging in via WeChat authentication	No Value
EmbedUserAgentString	Set to embed one specified user agent string for all HTTP requests from Zoom client application	No Value
EmbedDeviceTag	Set to embed one specified device tag string for all HTTP requests from Zoom client application	No Value
EnableAutoUploadDumps	Automatically send dump logs, when there is a critical-failure issue	Disabled
EnableTemporalDeNoise	Enables de-noising of video	Enabled
EnableGPUComputeUtilization	Allows the client to utilize GPU acceleration for video processing	Enabled
EnableHardwareAccForVideoSend	Allows the client to utilize GPU acceleration for sending video	Enabled
EnableHardwareAccForVideoReceive	Allows the client to utilize GPU acceleration for receiving video	Enabled
ShareSessionDisableUDP	Forces Screen Sharing traffic over TCP instead of UDP.	Disabled
IntegrateZoomWithOutlook	Show Zoom contact status in Outlook, and sets Zoom as the default chat, meeting, and phone app in Outlook.	Disabled
SetAccEventsOptions	Sets what alerts will be read by a screen reader. The following options are available (enter the numeric value in the string): IM chat received = 1 Participant joined/left meeting = 2 Participant joined/left waiting room = 4 Audio muted/unmuted by host = 8 Video stoped by host = 16 Screen sharing started stoped by participant = 32 Recording permission granted revoked = 64 Pub meeting chat received = 128 Meeting chat received = 256 In-meeting file uploaded = 512 Closed captioning available = 1024 Closed captioning available typing privilege granted revoked = 2048 Host privilege granted/revoked = 4096 Cohost privilege granted/revoked = 8192 Remote control permission granted/revoked = 16384 Livestream started/stopped = 32768 Participant raised/lowered hand = 65536 Q&A question received = 131072 Q&A answer received = 262144 Role changed to panelist = 524288 Role changed to attendee = 1048576	No Value (all alerts will be read)
DisableDirectConnectionPK	Will disable the direct connection PK request by the Zoom client	Disabled
DisableDirectConnection2Web	Will disable all direct connections to Zoom web service.	Disabled
EnableAutoUploadMemlogs	Zoom client will send critical-failure-logs to Zoom backend to improve the service.	Disabled
Disable3rdModuleVerify	Disables the check of the signature of the third-party library.	Disabled
SetDevicePolicyToken	Set device policy's token from web settings	No Value
IgnoreBandwidthLimits	Ignore bandwidth limited set on web settings. Useful for exceptions.	Disabled
SetNoRevocationCheckUrls	Allow specific URLs to be trusted and bypass the untrusted certificate prompt if the certificate is revoked. Multiple domains should be separated by ";", for example "hooli.com;hooli.org"	No Value
DisableZoomApps	Hide Zoom Apps quick launch button in the Zoom interface.	Disabled

*Note: FirewallPortStart and FirewallPortEnd need to be configured together, Zoom does not recommend enabling one without enabling the other.

Meetings

The following Registry options can be found under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Meetings\Meetings.

Registry Item	Policy	Default Value
AlwaysShowConnectedTime	The client will show meeting connected time	Disabled
AlwaysShowMeetingControls	The client will always show meeting controls	Disabled
AutoAdjustAudioSettings	The client will adjust audio settings automatically	Enabled
AutoEnableDualMonitor	Enable dual monitor if the system supports	Disabled
AutoHideNoVideoUsers	The client will hide users with video turned off in gallery View	Disabled
AutoJoinVoIP	Auto-connect audio with VoIP when joining a meeting	Disabled
ControlAllAppsWhenRemoteControl	All applications can be controlled during remote control session	Disabled
DisableAeroModeDuringShareScreen	Disable Aero mode when screen sharing on Windows 7 system	Enabled
DisableAnnotation	The client will disable and hide the ability to annotate over shared screen	Disabled
DisableCloudRecording	The client will disable and hide the cloud recording feature	Disabled
DisableLocalRecording	The client will disable and hide the local recording feature	Disabled
DisableMeetingChat	The client will disable and hide the in-meeting chat feature	Disabled
DisableMeetingFileTransfer	Client will disable and hide the in-meeting computer file-transfer feature.	Disabled
DisableMeeting3rdPartyFileStorage	Client will disable and hide the in-meeting 3rd party file transfer options.	Disabled
DisableReceiveVideo	The client will disable and hide the ability to receive video	Disabled
DisableShareScreen	The client will disable and hide the Share Screen feature	Disabled
DisableVideoCamera	The client will disable and hide the ability to send video	Disabled
EnableHDVideo	The client will capture and send camera video in HD 720p format	Disabled
EnterFullScreenWhenJoinMeeting	The client will automatically enter full-screen mode when joining a meeting	Disabled
EnterFullScreenWhenViewingSharedScreen	The client will enter full-screen mode when viewing the shared screen	Enabled
FitContentWhenViewingSharedScreen	The client will resize content to fit the window when viewing the shared screen	Enabled
MuteVoIPWhenJoinMeeting	The client will mute VoIP when joining a meeting	Disabled
PromptConfirmWhenLeaveMeeting	The client will prompt confirmation when leaving a meeting	Enabled
RecordingFilePath	Set path for local meeting recording files Example C:\Users\User\MyZoomRecordings	User\Document
TurnOffVideoCameraOnJoin	Turn off video camera when joining the meeting	Disabled
EnableMirrorEffect	The client will enable mirror effect of your video camera	Enabled
EnableHIDControl	The client will enable HID audio device control	Enabled
DisableComputerAudio	The client will disable computer audio	Disabled
EnableSplitScreen	The client will enable side-by-side mode	Disabled
ShowConfirmDialogWhenWebJoin	Client will notify an user when auto-joining a meeting from website	Disabled
DisableRemoteControl	During screen sharing, the person who is sharing is not able to allow others to control the shared content.	Disabled
DisableRemoteSupport	Disallow meeting host to provide 1:1 remote support to another participant. This option depends on breakout room settings.	Enabled
DisableClosedCaptioning	Disable the use of closed captioning	Disabled
DisableQnA	Disable the use of Q&A in webinars	Disabled
AlwaysShowVideoPreviewDialog	Always show video preview dialog when joining a video meeting	Disabled
DisableVirtualBkgnd	Disable virtual background for windows and mac	Disabled
EnableFaceBeauty	Enable touch up my appearance	Enabled
DisableWhiteBoard	Disable whiteboard feature	Disabled
EnableShareAudio	Enable share audio feature	Disabled
EnableShareVideo	Enable share video feature	Disabled
DisableDirectShare	Disable to share with Zoom Rooms	Disabled
DisableDesktopShare	Disable share desktop feature	Disabled
DisableAudioOverProxy	Disable audio media stream over a proxy server	Disabled
DisableVideoOverProxy	Disable video media stream over proxy server	Disabled
DisableSharingOverProxy	Disable screen sharing media stream over a proxy server	Disabled
SetUseSystemDefaultMicForVOIP	When enabled, Zoom will use the default microphone set in Windows	Disabled
SetUseSystemDefaultSpeakerForVOIP	When enabled, Zoom will use the default speaker set in Windows	Disabled
SetUseSystemCommunicationMicForVOIP	Set to use the system default communication microphone for VoIP	Disabled
SetUseSystemCommunicationSpeakerForVOIP	Set to use the system default communication speaker for VoIP	Disabled
BandwidthLimitUp	Restricts maximum uplink traffic bandwidth from the Zoom client Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.	No value (all values in Kbps)
BandwidthLimitDown	Restricts maximum downlink traffic bandwidth from the Zoom client Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.	No value (all values in Kbps)
EnableIndependentDataPort	If enabled, the client will use the following ports for media transmission: AUDIO: 8803 AS: 8802 VIDEO: 8801	Disabled
LegacyCaptureMode	Disables GPU acceleration	Disabled
EnableStartMeetingWithRoomSystem	Displays the Call Room System button on the home screen of the Zoom client	Disabled
EnableStartMeetingWithRoomSystem	Client will optimize screen sharing for video clip when sharing directly to a Zoom Room.	Enabled
PresentToRoomOptimizeVideo	Set sharing option when sharing directly to a Zoom Room. 0 - Show all sharing options 1 - Automatically share desktop	1
PresentToRoomOption	Set sharing option when sharing directly to a Zoom Room within a meeting. 0 - Show all sharing options 1 - Automatically share desktop	0
ShowZoomWinWhenSharing	Displays the Zoom meeting window, even when screen sharing	Disabled
MuteWhenLockScreen	When the computer is locked, if the Zoom client is in a meeting, it will automatically mute the microphone and turn off camera	Disabled
EnableOriginalSound	Automatically enables the Original Audio setting for the microphone	Disabled
AppendCallerNameForRoomSystem	If enabled the Zoom app will display the caller name for Room system	Disabled
EnableElevateForAdvDSCP	If enabled, the Zoom app will start an elevated video process to support advanced DSCP marks	Disabled
EnableSpotlightSelf	Enables spotlight of your video when speaking	Disabled
Enable49video	Allows Gallery View to display up to 49 participants per screen	Disabled
EnableRemindMeetingTime	Enables a reminder for upcoming meetings	Disabled
VideoRenderMethod	Sets the specified video rendering method using the following string variables: 0 - Auto 1 - Direct3D11 Flip Mode 2 - Direct3D11 3 - Direct3D9 4 - GDI	0
PresentToRoomOptimizeVideo	The client will optimize screen sharing for video clip when user shares directly to a Zoom Room.	Enabled
PresentToRoomOption	Set specified sharing option when a user shares directly to a Zoom Room: 0 - Show all sharing options 1 - Automatically share desktop	1
PresentInMeetingOption	Set specified sharing option when user shares screen in a meeting: 0 - Show all sharing options 1 - Automatically share desktop	1
DisableVideoFilters	Set to disable virtual filters	Disabled
ScreenCaptureMode	Set the specified screen capture mode: 0 - Auto 1 - Legacy operating systems 2 - Share with window filtering 3 - Advanced share with window filtering 4 - Advanced share without window filtering	0
HidePhoneInComingCallWhileInMeeting	Enable to prevent incoming call notifications while in a meeting.	Disabled
EnableShareClipboardWhenRemoteControl	Enable to allow clipboard access during remote control sessions.	Disabled
EnableDoNotDisturbInSharing	Set to silence system notifications when sharing desktop	Enabled
SetSuppressBackgroundNoiseLevel	Set noise suppression level Auto - 0 Low -1 Medium - 2 High - 3	0 (Auto)
SetAudioSignalProcessType	Set audio signal processing for Windows audio devices Auto - 0 Off - 1 On - 2	0 (Auto)

Chat

The following Registry options can be found under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Meetings\chat.

Registry Item	Policy	Default Value
DisableLinkPreviewInChat	The client will disable and hide link preview feature in chat	Disabled
SetMessengerDoNotDropThread	Moves messages with new replies to the bottom of the chat window	Disabled
ShowVoiceMessageButton	Displays the Voice to Text option in chat controls	Enabled
AlwaysShowIMNotificationBanner	Show notification banner on screen until dismissed	Disabled
PlaySoundForIMMessage	Control the audio notifications when an IM message is received	Enabled
ShowIMMessagePreview	Control if the message previews in system notifications when an IM message is received	Enabled
MuteIMNotificationWhenInMeeting	Control if IM message system notifications are muted when in a meeting	Enabled

Zoom Rooms

The following Registry options can be found under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Rooms\General.

Registry Item	Policy	Default Value
EnableSSLVerification	The client will verify the server certificate	Enabled

Related articles