Mass-deploying preconfigured settings for Mac in zoom App
Zoom desktop client for macOS can be installed with preconfigured settings by IT administrators. Install the IT Admins Installer for macOS along with a .plist file that is configured.
An end-user can still modify the settings after deployment if they are enforced or set as the default.
Zoom Device Management lets you manage desktop clients and mobile apps from the Zoom Web portal, allowing you to centrally control desktop client and mobile app settings.
Zoom can be installed pre-configured on Android, iOS, and Windows devices. For centrally configuring desktop clients and mobile apps, Zoom has its own Device Management platform.
Prerequisites for using the IT admin installer
- IT Admin version of the macOS desktop client
How to download the admin desktop client installer
- Zoom’s Download Center can be found there
- The Download for IT Admin link should appear after clicking the Zoom Client for Meetings download button.
Priority of settings
There are multiple places where settings can be configured. Some Zoom settings can only be configured by Zoom Administrators or IT Administrators, but some can also be configured by end-users. Zoom prioritizes conflicting settings as follows:
- Using ZDM, you can deploy and lock settings
- The setting under PackageRecommend has not been set for settings deployed via us.zoom.config.plist
- Account and group web settings are locked
- User-selected settings
- Under PackageRecommend are the settings from us.zoom.config.plist
- that allow you to set Web settings
How to create and configure the .plist file
Creating a .plist file for Zoom on Mac is necessary to configure the desktop client’s options. In the absence of a .plist file, Zoom will run with the default settings.
How to require and recommend default settings
With the PackageRecommend key, settings can be configured as enforced defaults or recommended defaults. Those settings will be installed with the Mac client if they are listed under the PackageRecommend key; however, after deployment, users can change those settings.
Set recommended settings by moving or adding them under <key>PackageRecommend</key>. You can create a plist file to disable Google or Facebook logins on the Mac client if you want it to “Automatically enter full screen when viewing shared content” by default:
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>nogoogle</key> <true/> <key>nofacebook</key> <true/> <key>PackageRecommend</key> <dict> <key>ZAutoFullScreenWhenViewShare</key> <true/> </dict> </dict> </plist>
Available configuration options
Plist key | Description | Default state and value | Value type |
Install and update |
|||
zAutoUpdate | Enable updates through the client by users. When disabled, the Check for Updates button is also hidden. Please see AutoUpdate section for important details. |
Disabled, 0 | Boolean |
EnableSilentAutoUpdate | Allow the desktop client to silently check for updates and, if user’s version is lower than the stable version set by Zoom, install upon launching the client. This option requires the AutoUpdate option to be enabled. Please see AutoUpdate section for important details. |
Enabled, 1 | Boolean |
AlwaysCheckLatestVersion | Allow the desktop client to check for updates and, if user’s version is lower than the latest version released by Zoom, prompt the user to install the update. This option requires the AutoUpdate option to be enabled. Please see AutoUpdate section for important details. |
Disabled, 0 | Boolean |
SetUpdatingChannel | Control the cadence of updates applied to the desktop client (version 5.6.8 or higher): Slow (0): fewer updates and better stability. Fast (1): newest features and updates. Please see AutoUpdate section for important details. |
Slow, 0 | Boolean |
DisableDaemonInstall | Control if the desktop client can upgrade to the 64-bit version upon update, if the 32-bit version is installed on a 64-bit system. | Disabled, 0 | Boolean |
SetEnrollToken4CloudMDM, token | Enroll your device into Zoom Device Management with a token provided from the web portal. | Disabled, (empty) | String |
Network |
|||
BlockUntrustedSSLCert | Block connections to untrusted SSL certificates. | Enabled, 1 | Boolean |
DisableCertPin | Disable Certificate Pinning. | Disabled, 0 | Boolean |
ProxyPAC, your_pac_url | Set proxy server for desktop client with PAC URL. | Disabled, (empty) | String |
ProxyServer, proxy_address | Set a proxy server for desktop client as named proxy. Example: server: port |
Disabled, (empty) | String |
ProxyBypass, bypass_rule | Set proxy bypass rule for the desktop client. | Disabled, (empty) | String |
DisableAudioOverProxy | Prevent audio traffic over proxies. | Disabled, 0 | Boolean |
DisableVideoOverProxy | Prevent video traffic over proxies. | Disabled, 0 | Boolean |
DisableSharingOverProxy | Prevent screen sharing traffic over proxies. | Disabled, 0 | Boolean |
BandwidthLimitUp | Set maximum sending bandwidth for the desktop client. Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. |
Disabled, (empty) | String (all values in Kbps) |
BandwidthLimitDown | Set maximum receiving bandwidth for the desktop client. Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. |
Disabled, (empty) | String (all values in Kbps) |
IgnoreBandwidthLimits | Ignore bandwidth limit set on web settings. (Useful for exceptions to bandwidth restrictions) | Disabled, 0 | Boolean |
EnableIndependentDataPort | If enabled, the client will use the following ports for media transmission: Audio: 8803 Screen share: 8802 Video: 8801 |
Disabled, 0 | Boolean |
DisableDirectConnection2Web | Disable all direct connections to Zoom web service. | Disabled, 0 | Boolean |
Authentication |
|||
NoFacebook | Remove Facebook login option. | Disabled, 0 | Boolean |
NoGoogle | Remove Google login option. | Disabled, 0 | Boolean |
NoSSO | Remove SSO login option. | Disabled, 0 | Boolean |
DisableLoginWithEmail | Remove Email login option. | Disabled, 0 | Boolean |
DisableKeepSignedInWithSSO | Require fresh SSO login upon client start. | Disabled, 0 | Boolean |
DisableKeepSignedInWithGoogle | Require fresh Google login upon client start. | Disabled, 0 | Boolean |
DisableKeepSignedInWithFacebook | Require fresh Facebook login upon client start. | Disabled, 0 | Boolean |
KeepSignedIn | Keep the user signed in to the client when relaunched. (Email login only) |
Disabled, 0 | Boolean |
zAutoSSOLogin | Defaults login to SSO. | Disabled, 0 | Boolean |
zSSOHost | Set the default SSO URL for SSO login. For example, hooli.zoom.us would be set as “ForceSSOUrl=hooli”. |
Disabled, (empty) | String |
ForceSSOURL | Set and lock the default SSO URL for SSO login. For example, hooli.zoom.us would be set as “ForceSSOUrl=hooli”. |
Disabled, (empty) | String |
EnableEmbedBrowserForSSO | Use embedded browser in the client for SSO. | Disabled, 0 | Boolean |
SetWebDomain | Sets the web domain for logging in or joining a meeting. By default, the value is https://zoom.us or https://zoom.com. |
Disabled, (empty) | String |
DisableAutoLaunchSSO | Prevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL. | Disabled, 0 | Boolean |
EnablePhoneLogin | Enables login with phone authentication. (A) | Disabled, 0 | Boolean |
EnableAlipayLogin | Enables login with Alipay authentication. (A) | Disabled, 0 | Boolean |
EnablQQLogin | Enables login with QQ authentication. (A) | Disabled, 0 | Boolean |
EnableWeChatLogin | Enables login with WeChat authentication. (A) | Disabled, 0 | Boolean |
Account, your account ID | Restrict the client to only join meetings hosted by the specified account IDs. (B) | Disabled, (empty) | String |
Login_Domain | Set the email address domain that users can login with, each separated by “&”. Example: zoom.us & hooli.com |
Disabled, (empty) | String |
EnableCloudSwitch | Enable the option to switch between Zoom commercial (default) and Zoom for Gov. | Disabled, 0 | Boolean |
EnforceSignInToJoin | Require users to be authenticated before joining a meeting with the desktop client. Authentication can take place through the the web portal, if joining through join URL. | Disabled, 0 | Boolean |
EnforceAppSignInToJoin | Require authentication on the desktop client to join any meeting on the desktop client. | Disabled, 0 | Boolean |
EnforceSignInToJoinForWebinar | Require users to be authenticated before joining a webinar with the desktop client. Authentication can take place through the the web portal, if joining through join URL. | Disabled, 0 | Boolean |
EnforceAppSignInToJoinForWebinar | Require authentication on the desktop client to join any webinar on the desktop client. | Disabled, 0 | Boolean |
SetDevicePolicyToken, device_token | Require internal meeting authentication. (C) | Disabled, (empty) | String |
General meeting and client options |
|||
zDualMonitorOn | Enable dual monitor mode. | Disabled, 0 | Boolean |
FullScreenWhenJoin | When starting or joining a meeting, the meeting window will enter full-screen. | Disabled, 0 | Boolean |
DefaultUsePortraitView | Default to Portrait Mode upon opening Zoom. | Disabled, 0 | Boolean |
DisableClosedCaptioning | Disable the use of all closed captioning. | Disabled, 0 | Boolean |
DisableManualClosedCaptioning | Disable the use of manual, user-entered captioning. | Disabled, 0 | Boolean |
DisableQnA | Disable the use of Q&A in webinars. | Disabled, 0 | Boolean |
DisableMeetingReactions | Disable the use of Meeting reactions. | Disabled, 0 | Boolean |
DisableNonVerbalFeedback | Disable the use of Non-verbal feedback. | Disabled, 0 | Boolean |
DisableWebinarReactions |
Disable the use of Webinar Reactions. | Disabled, 0 | Boolean |
ConfirmWhenLeave | Confirm before leaving a meeting. | Enabled, 1 | Boolean |
ShowConnectedTime | Display the length of time that the user has been in the current meeting. | Disabled, 0 | Boolean |
MuteWhenLockScreen | Automatically mute the microphone, when the screen is locked during a meeting. | Enabled, 1 | Boolean |
EnableRemindMeetingTime | Display reminder notifications for upcoming meetings. | Disabled, 0 | Boolean |
Video |
|||
zDisableRecvVideo | Disable receiving video. | Disabled, 0 | Boolean |
zDisableSendVideo | Disable sending video. | Disabled, 0 | Boolean |
zDisableVideo | Automatically turn off camera when joining a meeting. | Disabled, 0 | Boolean |
zUse720PByDefault | Use HD video in meetings. | Disabled, 0 | Boolean |
EnableMirrorEffect | Enable mirroring of your video. Mirror effect only affects your view of your video. | Enabled, 1 | Boolean |
EnableFaceBeauty | Enable Touch up my appearance. | Disabled, 0 | Boolean |
EnableLightAdaption | Enable Adjust for low-light video setting. | Disabled, 0 | Boolean |
EnableAutoLightAdaption | Set mode of adjusting low-light video feature. This is dependent on the EnableLightAdaption option. 1 – Auto 0 – Manual |
Auto, 1 | Boolean |
AlwaysShowVideoPreviewDialog | Always show the video preview when joining a meeting. | Enabled, 1 | Boolean |
zHideNoVideoUser | Hide non-video participants by default. | Disabled, 0 | Boolean |
EnableSpotlightSelf | Show self as the active speaker when speaking. | Disabled, 0 | Boolean |
Enable49Video | Set max number of participants displayed in Gallery View to 49 participants per screen. | Disabled, 0 | Boolean |
VideoRenderMethod | Set the video rendering method: 0 – Auto 1 – Direct3D11 Flip Mode 2 – Direct3D11 3 – Direct3D9 4 – GDI |
Auto, 0 | String |
Audio |
|||
DisableComputerAudio | Disable and remove the Computer Audio from the meeting audio options. | Disabled, 0 | Boolean |
SetUseSystemDefaultSpeakerForVOIP | Use the default system microphone in Windows. | Disabled, 0 | Boolean |
SetUseSystemDefaultMicForVOIP | Use the default system speakers in Windows. | Disabled, 0 | Boolean |
AudioAutoAdjust | Enable Automatically adjust microphone volume audio setting. | Enabled, 1 | Boolean |
SetSuppressBackgroundNoiseLevel | Set level of background noise suppression: 0 – Auto 1- Low 2 – Medium 3 – High |
Auto (0) | String |
zAutoJoinVoip | Automatically connect audio with computer audio when joining a meeting. | Disabled, 0 | Boolean |
MuteVoipWhenJoin | Mute computer audio microphone when joining a meeting. | Disabled, 0 | Boolean |
EnableHIDControl | Enables HID control of USB devices by the Zoom client. | Enabled, 1 | Boolean |
Screen sharing |
|||
DisableScreenShare | Disable Screen Share option in meetings. | Disabled, 0 | Boolean |
zAutoFullScreenWhenViewShare | When viewing shared content, the content window automatically goes fullscreen. | Enabled, 1 | Boolean |
zAutoFitWhenViewShare | When viewing shared content, the content window automatically adjusts to fit the viewer’s screen. | Enabled, 1 | Boolean |
zDisableAnnotation | Disable and remove the ability to annotate over shared screen. | Disabled, 0 | Boolean |
EnableShareAudio | Enable the Share computer audio option when sharing. | Enabled, 1 | Boolean |
EnableShareVideo | Enable the Optimize for video clip option when sharing. | Enabled, 1 | Boolean |
DisableWhiteboard | Disable Whiteboard feature. | Disabled, 0 | Boolean |
DisableSlideControl | Disable Slide Control feature. | Disabled, 0 | Boolean |
DisableDesktopShare | Disable the option to share your desktop when screen sharing. | Disabled, 0 | Boolean |
DisableRemoteControl | Disable Remote Control feature. | Disabled, 0 | Boolean |
DisableRemoteSupport | Disable Remote Support feature. | Enabled, 1 | Boolean |
zRemoteControllAllApp | Allow remote control of all applications. | Enabled, 1 | Boolean |
EnableShareClipboardWhenRemoteControl | Allow clipboard access during remote control. | Disabled, 0 | Boolean |
PresentInMeetingOption | Set sharing option when sharing directly to a Zoom Room within a meeting: 0 – Show all sharing options 1 – Automatically share desktop |
Show all sharing options, 0 | Boolean |
EnableDoNotDisturbInSharing | Silence system notifications when sharing desktop. | Enabled, 1 | Boolean |
LegacyCaptureMode | Disable GPU acceleration. | Disabled, 0 | Boolean |
SetScreenCaptureMode | Set the screen capture mode: 0 – Auto 1 – Legacy operating systems 2 – Share with window filtering 3 – Advanced share with window filtering 4 – Advanced share without window filtering |
Auto, 0 | String |
EnableHardwareOptimizeVideoSharing | Use hardware acceleration to optimize video sharing. | Enabled, 1 | Boolean |
Zoom Phone |
|||
HidePhoneInComingCallWhileInMeeting | Prevent incoming call notifications while in a meeting. | Disabled, 0 | Boolean |
In-meeting Chat |
|||
zDisableChat | in-meeting chat"}”>Disable in-meeting chat. | Disabled, 0 | Boolean |
zDisableFT | in-meeting file transfer (sending or receiving files)"}”>Disable in-meeting file transfer. (sending or receiving) | Disabled, 0 | Boolean |
DisableMeeting3rdPartyFileStorage | Disable in-meeting 3rd party file transfer. | Disabled, 0 | Boolean |
Zoom Apps |
|||
DisableZoomApps | Hide the Zoom Apps button. | Disabled, 0 | Boolean |
Background and Filters |
|||
DisableVirtualBkgnd | Disable Virtual Background feature. | Disabled, 0 | Boolean |
DisableVideoFilters | Disable Video filters feature. | Disabled, 0 | Boolean |
EnableAutoReverseVirtualBkgnd | virtual background auto-reversal."}”>Require post-meeting virtual background auto-reversal. | Disabled, 0 | Boolean |
Recording |
|||
RecordPath, your_recording_path | Set the default recording location for local recordings. | /Users/User Name/Documents/Zoom | String |
zDisableCMR | Disable recording to the cloud. | Disabled, 0 | Boolean |
zDisableLocalRecord | Disable recording locally on the device. | Disabled, 0 | Boolean |
Zoom Room and Room System calling |
|||
DisableDirectShare | Disable direct share with Zoom Rooms option. | Disabled, 0 | Boolean |
EnableStartMeetingWithRoomSystem | Display the Call Room System button on the home screen of the desktop client. | Disabled, 0 | Boolean |
PresentToRoomWithAudio | Share sound when screen sharing to a Zoom Room. | Enabled, 1 | Boolean |
PresentToRoomOptimizeVideo | Optimize screen sharing for video clip when sharing to a Zoom Room. | Enabled, 1 | Boolean |
PresentToRoomOption | Set sharing option when sharing to a Zoom Room: 0 – Show all sharing options 1 – Automatically share desktop |
Automatically share desktop, 1 | Boolean |
Zoom Chat |
|||
DisableLinkPreviewInChat | Disable link previews. | Disabled, 0 | Boolean |
SetMessengerDoNotDropThread | Move messages with new replies to the bottom of the chat/channel. | Disabled, 0 | Boolean |
ShowProfilePhotosInChat | Controls if user profile pictures are shown in Zoom Chat. | Disabled, 0 | Boolean |
ShowVoiceMessageButton | Allow use of the Send audio message option. | Enabled, 1 | Boolean |
ShowVideoMessageButton | Allow use of the Send video message option. | Enabled, 1 | Boolean |
PlaySoundForIMMessage | Play audio notifications when an IM message is received. | Enabled, 1 | Boolean |
ShowIMMessagePreview | Allow message previews in system notifications when a chat message is received. | Enabled, 1 | Boolean |
MuteIMNotificationWhenInMeeting | Mute chat system notifications when in a meeting. | Enabled, 1 | Boolean |
Miscellaneous |
|||
EmbedUserAgentString | Embed a specified user agent string for all HTTP requests from Zoom client. | Disabled, (empty) | String |
EmbedDeviceTag | Embed a specified device tag string for all HTTP requests from Zoom client application. This string will be appended to the head of the regular HTTP requests. | Disabled, (empty) | String |
Notes:
- (A) Only devices in China are compatible with these options.
- (B) To acquire your account ID, have the account owner or admin contact Support.
- (C) To enable this, an admin or owner of the account must contact Support. For view/edit access to Device Policy Management, the owner must also edit a role. From the Device Policy Management page, the token can be obtained.
**Important notes regarding AutoUpdate
When using versions prior to 5.8.6, the AutoUpdate option is not a true automatic update feature. It is only possible to use this option if the user would like to manually check for updates and not automatically keep on top of the latest version of the desktop client. Please refer to the different options for silent auto-updates and always checking the latest version when using the EnableSilentAutoUpdate or AlwaysCheckLatestVersion parameters because these can enhance the AutoUpdate option to enable something closer to a true auto-update.
In versions 5.8.6 and higher, you can set AutoUpdate for a Slow or Fast release cycle to download and install updates automatically. With the SetUpdatingChannel option below, you can configure the cadence of releases with AutoUpdate.
Note: There are two types of MSI files used by the VDI Host Installer: the client-side MSI installer, which uses the same switches as the server-side MSI installer. This type of software can be installed using a standard software and device management tool. In the case of VDI clients, the MSI configuration will have the same effect as that of the non-VDI clients, and they can also be configured according to their needs.
How to deploy Zoom
This example .plist file is provided with the default settings from above; however, the original .plist file can be found here.
You will need to rename the US.Zoom.config.plist file once the .plist file is completed. When ZoomInstallerIT.pkg is deployed in a folder together with this file, the installation automatically adds the .plist file to the /Library/Preferences folder as long as it is in the same folder as the ZoomInstallerIT.pkg.
As an alternative to JAMF, Intune, AirWatch, or other solutions, this .plist can also be distributed via JAMF, Intune, or AirWatch. It is also likely that the Zoom client will try to open the us.zoom.config.plist file. This folder can be found in /Library/Managed Preferences.