At Zoom, we are hard at work to provide you with the best 24x7 global support experience during this pandemic. As part of this ongoing commitment, please review our updated Support Guidelines.

Group Policy Options for the Windows desktop client and Zoom Rooms Follow


Installing with an Active Directory Administrative Template or registry keys, administrators can lock certain features and settings upon deployment of Zoom. Administrators can disable features such as screen sharing or video sharing for all meetings that user joins, regardless of who is hosting the meeting. Active Directory admins can configure Zoom settings and features through Group Policy at any time. Zoom does not need to be installed on the computer for these settings to be configured. Zoom can be downloaded at a later time and the configuration will apply the first time Zoom is launched. The settings apply whether the standard installer is used or the MSI installer is used.

Below are the registry items and their associated policies, as well as the default values in the administrative templates. 

The Zoom Desktop application, as well as the Zoom Rooms application, can also be deployed and configured via command-line or Intune as well. 

Note: To ensure compatibility with the policies listed below, we recommend updating to the latest version of the Windows Desktop client or Zoom Room software.

This article goes over:


Note: Some of the switches listed below require the latest version of the Zoom IT Installer.


The following downloads contain the administrative templates, as well as registry files for specific versions of Zoom:

Note: Each download includes .ADM and .ADMX files. If using the .ADM files, the polices will be located under Classic Administrative Templates.

Active Directory Administrative Template Configuration

  1. Login to your Active Directory server as an admin.
  2. Click Start, choose Administrative Tools, then Active Directory Users and Computers.
  3. Expand the domain where you would like to set the group policy.
  4. Right-click on the domain where you would like to set the group policy, click Properties, then Group Policy.
  5. Create a Group Policy Object and name it Zoom.
  6. Select the newly created Group Policy Object and click Edit.
  7. Under the Computer Configuration, right click on Administrative Templates.
  8. Choose Add/Remove Templates.
  9. Browse and find the Administrative Template downloaded from this article. Click Open.
  10. Close the Add/Remove Templates window.
  11. Under Computer Configuration then Administrative Templates, you should now have the option for Zoom.
  12. Double click on the Zoom folder to open a list of subfolders: General Settings, Chat Settings, and Meeting Settings.
  13. Double click on one of the subfolders to view settings and double click on the individual setting to view more information and enable or disable it.

Desktop Client Settings


The following Registry options can be found under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Meetings\General.​

Registry Item Policy Default Value
AlwaysUsePersonalMeetingID Always use personal meeting ID to start meeting for instant meetings Disabled
AutoStartAfterReboot Auto start client after reboot Disabled
AutoStartInSystemTray Auto start client after reboot in the system tray Disabled
BlockUntrustedSSLCert The client will block connections to untrusted SSL certificates Disabled
CloseToSystemTray The client will minimize to system tray and not show on task-bar when closed  Enabled

Disable creating a desktop shortcut

DisableFacebookLogin Disable login with Facebook OAuth Disabled
DisableGoogleLogin  Disable login with Google OAuth Disabled

Disable login with SSO

DisableLoginWithEmail Disable login with email and password Disabled
DisableKeepSignedInWithSSO Disable keep signed in if signing in with SSO Disabled
DisableKeepSignedInWithGoogle Disable keep signed in if signing in with Google Disabled
DisableKeepSignedInWithFacebook Disable keep signed in if signing in Facebook Disabled
EnableClientAutoUpdate Enable updates through the client by users. When disabled, the Check for Updates button is also hidden.  

EXE: Enabled

MSI: Disabled

EnableSilentAutoUpdate Allows the desktop client to silently check for updates and install upon launching the client. This option requires AutoUpdate option to be enabled, and will fail if not enabled.


ForceLoginWithSSO Force login with SSO only Disabled

Set account IDs that client is restricted to join a meeting hosted by specific Account ID numbers (separated by ",")

Example: 11111,22222

No Value

Restrict email domains that the client can log in with (separated by "&")

Example: &

No Value

Set default SSO URL for a client login


No Value
EnableEmbedBrowserForSSO Uses embed browser in the Windows client for SSO Disabled
ForceSSOURL Set and lock the default SSO URL for a client login

No Value


This will keep the user signed into the client when it is restarted Disabled


Sets the web domain for logging in or joining a meeting, by default the values is or No value
DefaultUsePortraitView Default to Portrait Mode upon opening Zoom Disabled


 Set proxy server to client with PAC URL No Value


Set a proxy server for the client as named proxy.

Example: server:port

No Value


Set proxy bypass rule for the client No Value
EnforceSignInToJoin Forces users to be signed in before joining a meeting from the app No Value
EnablePhoneLogin Enables logging in via phone authentication No Value
EnableAlipayLogin Enables logging in via Alipay authentication No Value
EnableQQLogin Enables logging in via QQ authentication No Value
EnableWeChatLogin Enables logging in via WeChat authentication No Value
EmbedUserAgentString Set to embed one specified user agent string for all HTTP requests from Zoom client application No Value
EmbedDeviceTag Set to embed one specified device tag string for all HTTP requests from Zoom client application No Value
EnableAutoUploadDumps Automatically send  dump logs, when there is a critical-failure issue Disabled


Enables de-noising of video Enabled


Allows the client to utilize GPU acceleration for video processing  Enabled


Allows the client to utilize GPU acceleration for sending video Enabled
EnableHardwareAccForVideoReceive Allows the client to utilize GPU acceleration for receiving video Enabled
ShareSessionDisableUDP Forces Screen Sharing traffic over TCP instead of UDP. Disabled
IntegrateZoomWithOutlook Show Zoom contact status in Outlook, and sets Zoom as the default chat, meeting, and phone app in Outlook. Disabled

Sets what alerts will be read by a screen reader. The following options are available (enter the numeric value in the string):

  • IM chat received = 1
  • Participant joined/left meeting = 2
  • Participant joined/left waiting room = 4
  • Audio muted/unmuted by host = 8
  • Video stoped by host = 16
  • Screen sharing started stoped by participant = 32
  • Recording permission granted revoked = 64
  • Pub meeting chat received = 128
  • Meeting chat received = 256
  • In-meeting file uploaded = 512
  • Closed captioning available = 1024
  • Closed captioning available typing privilege granted revoked = 2048
  • Host privilege granted/revoked = 4096
  • Cohost privilege granted/revoked = 8192
  • Remote control permission granted/revoked = 16384
  • Livestream started/stopped = 32768
  • Participant raised/lowered hand = 65536
  • Q&A question received = 131072
  • Q&A answer received = 262144
  • Role changed to panelist = 524288
  • Role changed to attendee = 1048576
No Value (all alerts will be read)
DisableDirectConnectionPK Will disable the direct connection PK request by the Zoom client Disabled
Will disable all direct connections to Zoom web service. Disabled
EnableAutoUploadMemlogs Zoom client will send critical-failure-logs to Zoom backend to improve the service. Disabled
Disable3rdModuleVerify Disables the check of the signature of the third-party library. Disabled
Set device policy's token from web settings No Value
Ignore bandwidth limited set on web settings. Useful for exceptions.  Disabled
SetNoRevocationCheckUrls Allow specific URLs to be trusted and bypass the untrusted certificate prompt if the certificate is revoked. Multiple domains should be separated by ";", for example ";" No Value
DisableZoomApps Hide Zoom Apps quick launch button in the Zoom interface. Disabled

*Note: FirewallPortStart and FirewallPortEnd need to be configured together, Zoom does not recommend enabling one without enabling the other. 


The following Registry options can be found under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Meetings\Meetings.

Registry Item Policy Default Value
AlwaysShowConnectedTime The client will show meeting connected time Disabled

The client will always show meeting controls


The client will adjust audio settings automatically


Enable dual monitor if the system supports


The client will hide users with video turned off in gallery View

AutoJoinVoIP Auto-connect audio with VoIP when joining a meeting Disabled

All applications can be controlled during remote control session

DisableAeroModeDuringShareScreen Disable Aero mode when screen sharing on Windows 7 system Enabled 

The client will disable and hide the ability to annotate over shared screen

DisableCloudRecording The client will disable and hide the cloud recording feature  Disabled
DisableLocalRecording The client will disable and hide the local recording feature Disabled
DisableMeetingChat The client will disable and hide the in-meeting chat feature Disabled

Client will disable and hide the in-meeting computer file-transfer feature.


Client will disable and hide the in-meeting 3rd party file transfer options. 

DisableReceiveVideo The client will disable and hide the ability to receive video Disabled
DisableShareScreen The client will disable and hide the Share Screen feature Disabled
DisableVideoCamera The client will disable and hide the ability to send video Disabled
EnableHDVideo The client will capture and send camera video in HD 720p format Disabled

The client will automatically enter full-screen mode when joining a meeting

EnterFullScreenWhenViewingSharedScreen The client will enter full-screen mode when viewing the shared screen Enabled
FitContentWhenViewingSharedScreen The client will resize content to fit the window when viewing the shared screen Enabled
MuteVoIPWhenJoinMeeting The client will mute VoIP when joining a meeting Disabled
PromptConfirmWhenLeaveMeeting The client will prompt confirmation when leaving a meeting Enabled

Set path for local meeting recording files

Example C:\Users\User\MyZoomRecordings

TurnOffVideoCameraOnJoin Turn off video camera when joining the meeting  Disabled
EnableMirrorEffect The client will enable mirror effect of your video camera Enabled
EnableHIDControl The client will enable HID audio device control Enabled
DisableComputerAudio The client will disable computer audio Disabled
EnableSplitScreen The client will enable side-by-side mode Disabled
ShowConfirmDialogWhenWebJoin Client will notify an user when auto-joining a meeting from website  Disabled
DisableRemoteControl During screen sharing, the person who is sharing is not able to allow others to control the shared content. Disabled
DisableRemoteSupport Disallow meeting host to provide 1:1 remote support to another participant. This option depends on breakout room settings. Enabled
AlwaysShowVideoPreviewDialog Always show video preview dialog when joining a video meeting Disabled
DisableVirtualBkgnd Disable virtual background for windows and mac Disabled
EnableFaceBeauty Enable touch up my appearance Enabled
DisableWhiteBoard Disable whiteboard feature Disabled
EnableShareAudio Enable share audio feature Disabled
EnableShareVideo Enable share video feature Disabled
DisableDirectShare Disable to share with Zoom Rooms Disabled
DisableDesktopShare Disable share desktop feature Disabled
DisableAudioOverProxy Disable audio media stream over a proxy server Disabled
DisableVideoOverProxy Disable video media stream over proxy server Disabled
DisableSharingOverProxy Disable screen sharing media stream over a proxy server Disabled
SetUseSystemDefaultMicForVOIP When enabled, Zoom will use the default microphone set in Windows Disabled
SetUseSystemDefaultSpeakerForVOIP When enabled, Zoom will use the default speaker set in Windows Disabled
SetUseSystemCommunicationMicForVOIP Set to use the system default communication microphone for VoIP Disabled
SetUseSystemCommunicationSpeakerForVOIP Set to use the system default communication speaker for VoIP Disabled
BandwidthLimitUp Allows the restriction of uplink traffic bandwidth from the Zoom Client No value
BandwidthLimitDown Allows the restriction of downlink traffic bandwidth from the Zoom Client No value

If enabled, the client will use the following ports for media transmission:

AUDIO: 8803
AS: 8802
VIDEO: 8801

LegacyCaptureMode Disables GPU acceleration  Disabled
EnableStartMeetingWithRoomSystem Displays the "Call Room System" button on the home screen of the Zoom app Disabled
ShowZoomWinWhenSharing Displays the Zoom meeting window, even when screen sharing Disabled
MuteWhenLockScreen When the computer is locked, if the Zoom client is in a meeting, it will automatically mute the microphone and turn off camera Disabled
EnableOriginalSound Automatically enables the Original Audio setting for the microphone Disabled
AppendCallerNameForRoomSystem If enabled the Zoom app will display the caller name for Room system Disabled
EnableElevateForAdvDSCP If enabled, the Zoom app will start an elevated video process to support advanced DSCP marks Disabled
EnableSpotlightSelf Enables spotlight of your video when speaking Disabled
Enable49video Allows Gallery View to display up to 49 participants per screen Disabled
EnableRemindMeetingTime Enables a reminder for upcoming meetings Disabled

Sets the specified video rendering method using the following string variables:

0 - Auto
1 - Direct3D11 Flip Mode
2 - Direct3D11
3 - Direct3D9
4 - GDI


The client will optimize screen sharing for video clip when user shares directly to a Zoom Room.


Set specified sharing option when a user shares directly to a Zoom Room:

0 - Show all sharing options
1 - Automatically share desktop


Set specified sharing option when user shares screen in a meeting:


0 - Show all sharing options
1 - Automatically share desktop


Set to disable virtual filters


Set the specified screen capture mode:

0 - Auto
1 - Legacy operating systems
2 - Share with window filtering
3 - Advanced share with window filtering
4 - Advanced share without window filtering

HidePhoneInComingCallWhileInMeeting Enable to prevent incoming call notifications while in a meeting.  Disabled
EnableShareClipboardWhenRemoteControl Enable to allow clipboard access during remote control sessions.  Disabled
EnableDoNotDisturbInSharing Set to silence system notifications when sharing desktop Enabled

Set noise suppression level

Auto - 0
Low -1
Medium - 2
High - 3

0 (Auto) 

Set audio signal processing for Windows audio devices

Auto - 0
Off - 1
On - 2

0 (Auto) 



The following Registry options can be found under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Meetings\chat.

Registry Item Policy Default Value


The client will disable and hide link preview feature in chat Disabled


Moves messages with new replies to the bottom of the chat window Disabled


Displays the Voice to Text option in chat controls Enabled
AlwaysShowIMNotificationBanner Show notification banner on screen until dismissed Disabled


Zoom Rooms

The following Registry options can be found under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Zoom\Zoom Rooms\General.

Registry Item Policy Default Value


The client will verify the server certificate Enabled