We have developed resources to help you through this challenging time. Click here to learn more.

Note: We are experiencing longer wait times than normal due to increased demand. You can still view answers to frequently asked questions or contact us but wait times may be longer than expected. Thank you for your patience.

Group Policy Options for the Windows Desktop Client and Zoom Rooms Follow

Overview

Installing with an Active Directory Administrative Template or registry keys, administrators can lock certain features and settings upon deployment of Zoom. Administrators can disable features such as screen sharing or video sharing for all meetings that user joins, regardless of who is hosting the meeting. Active Directory admins can configure Zoom settings and features through Group Policy at any time. Zoom does not need to be installed on the computer for these settings to be configured. Zoom can be downloaded at a later time and the configuration will apply the first time Zoom is launched. The settings apply whether the standard installer is used or the MSI installer is used.

Below are the registry items and their associated policies, as well as the default values in the administrative templates. 

The Zoom Desktop application, as well as the Zoom Rooms application, can also be deployed and configured via command-line or Intune as well. 

Note: To ensure compatibility with the policies listed below, we recommend updating to the latest version of the Windows Desktop client or Zoom Room software.

This article goes over:

Prerequisites

Templates

The following downloads contain the administrative templates, as well as registry files for specific versions of Zoom:

Active Directory Administrative Template Configuration

  1. Login to your Active Directory server as an admin.
  2. Click Start, choose Administrative Tools, then Active Directory Users and Computers.
  3. Expand the domain where you would like to set the group policy.
  4. Right-click on the domain where you would like to set the group policy, click Properties, then Group Policy.
  5. Create a Group Policy Object and name it Zoom.
  6. Select the newly created Group Policy Object and click Edit.
  7. Under the Computer Configuration, right click on Administrative Templates.
  8. Choose Add/Remove Templates.
  9. Browse and find the Administrative Template downloaded from this article. Click Open.
  10. Close the Add/Remove Templates window.
  11. Under Computer Configuration then Administrative Templates, you should now have the option for Zoom.
  12. Double click on the Zoom folder to open a list of subfolders: General Settings, Chat Settings, and Meeting Settings.
  13. Double click on one of the subfolders to view settings and double click on the individual setting to view more information and enable or disable it.

Desktop Client Settings

General

The following Registry options can be found under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Meetings\General.

Registry Item Policy Default Value
AlwaysUsePersonalMeetingID Always use personal meeting ID to start meeting for instant meetings Disabled
AutoStartAfterReboot Auto start client after reboot Disabled
AutoStartInSystemTray Auto start client after reboot in the system tray Disabled
BlockUntrustedSSLCert The client will block connections to untrusted SSL certificates Disabled
CloseToSystemTray The client will minimize to system tray and not show on task-bar when closed  Enabled
DisableCreatingDesktopShortcut

Disable creating a desktop shortcut

Disabled
DisableFacebookLogin Disable login with Facebook OAuth Disabled
DisableGoogleLogin  Disable login with Google OAuth Disabled
DisableLoginWithSSO

Disable login with SSO

Disabled
DisableLoginWithEmail Disable login with email and password Disabled
EnableClientAutoUpdate Enable the client to auto-update 

EXE: Enabled

MSI: Disabled

ForceLoginWithSSO Force login with SSO only Disabled
SetAccountIDsRestrictedToJoin

Set account IDs that client is restricted to join a meeting hosted by specific Account ID numbers (separated by ",")

Example: 11111,22222

No Value
SetEmailDomainsRestrictedToLogin

Restrict email domains that the client can log in with (separated by "&")

Example: abc.com & zoom.us

No Value
SetSSOURL

Set default SSO URL for a client login

Example: yourcompany.zoom.us

No Value
EnableEmbedBrowserForSSO Uses embed browser in the Windows client for SSO Disabled
ForceSSOURL Set and lock the default SSO URL for a client login No Value

 

Meetings

The following Registry options can be found under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Meetings\Meetings.

Registry Item Policy Default Value
AlwaysShowConnectedTime The client will show meeting connected time Disabled
AlwaysShowMeetingControls

The client will always show meeting controls

Disabled
AutoAdjustAudioSettings

The client will adjust audio settings automatically

Enabled
AutoEnableDualMonitor

Enable dual monitor if the system supports

Disabled
AutoHideNoVideoUsers

The client will hide users with video turned off in gallery View

Disabled
AutoJoinVoIP Auto-connect audio with VoIP when joining a meeting Disabled
ControlAllAppsWhenRemoteControl

All applications can be controlled during remote control session

Disabled
DisableAeroModeDuringShareScreen Disable Aero mode when screen sharing on Windows 7 system Enabled 
DisableAnnotation

The client will disable and hide the ability to annotate over shared screen

Disabled
DisableCloudRecording The client will disable and hide cloud recording feature  Disabled
DisableLocalRecording The client will disable and hide local recording feature Disabled
DisableMeetingChat The client will disable and hide the in-meeting chat feature Disabled
DisableMeetingFileTransfer The client will disable and hide in meeting file-transfer feature Disabled
DisableReceiveVideo The client will disable and hide the ability to receive video Disabled
DisableShareScreen The client will disable and hide the Share Screen feature Disabled
DisableVideoCamera The client will disable and hide the ability to send video Disabled
EnableHDVideo The client will capture and send camera video in HD 720p format Disabled
EnterFullScreenWhenJoinMeeting

The client will automatically enter full-screen mode when joining a meeting

Disabled
EnterFullScreenWhenViewingSharedScreen The client will enter full-screen mode when viewing the shared screen Enabled
FitContentWhenViewingSharedScreen The client will resize content to fit the window when viewing the shared screen Enabled
MuteVoIPWhenJoinMeeting The client will mute VoIP when joining a meeting Disabled
PromptConfirmWhenLeaveMeeting The client will prompt confirmation when leaving a meeting Enabled
RecordingFilePath

Set path for local meeting recording files

Example C:\Users\User\MyZoomRecordings

User\Document
TurnOffVideoCameraOnJoin Turn off video camera when joining the meeting  Disabled
EnableMirrorEffect The client will enable mirror effect of your video camera Enabled
EnableHIDControl The client will enable HID audio device control Enabled
DisableComputerAudio The client will disable computer audio Disabled
EnableSplitScreen The client will enable side-by-side mode Disabled
DisableRemoteControl During screen sharing, the person who is sharing is not able to allow others to control the shared content. Disabled
DisableRemoteSupport Disallow meeting host to provide 1:1 remote support to another participant. This option depends on breakout room settings. Enabled
AlwaysShowVideoPreviewDialog Always show video preview dialog when joining a video meeting Disabled
DisableVirtualBkgnd Disable virtual background for windows and mac Disabled
EnableFaceBeauty Enable touch up my appearance Enabled
DisableWhiteBoard Disable whiteboard feature Disabled
EnableShareAudio Enable share audio feature Disabled
EnableShareVideo Enable share audio feature Disabled
DisableDirectShare Disable to share with Zoom Rooms Disabled
DisableDesktopShare Disable share desktop feature Disabled
DisableAudioOverProxy Disable audio media stream over a proxy server Disabled
DisableSharingOverProxy Disable screen sharing media stream over a proxy server Disabled
ProxyPac

Set proxy server to client with PAC URL

No value
ProxyServer

Set a proxy server for the client as named proxy.

Example: server:port

No value
ProxyBypass Set proxy bypass rule for the client No value
KeepSignedIn The client will keep signed in Disabled

 

Chat

The following Registry options can be found under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Meetings\chat.

Registry Item Policy Default Value

DisableLinkPreviewInChat

The client will disable and hide link preview feature in chat Disabled

 

Zoom Rooms

The following Registry options can be found under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Rooms\General.

Registry Item Policy Default Value

EnableSSLVerification

The client will verify the server certificate Disabled

 

Was this article helpful?