Zoom Desktop Client can be configured in three different ways for Windows: via MSI installer for configuration and installation, via Active Directory administrative templates utilizing Group Policy, or via registry keys.

Zoom Rooms for Windows can also be configured with a Group Policy template or registry key using Active Directory administrative templates.

You can deploy Zoom using GPO or SCCM if you use the MSI installer. Install the client by using a startup script if you’re installing via GPO. Install using a logon script if you also want to deploy the Outlook plugin via GPO.

Upon deployment, Zoom administrators can lock specific features and settings by using Active Directory Administrative Templates or registry keys.

Note:

Installations of MSI require elevated administrative rights.

This article covers:

  • Downloading the MSI installer
  • Priority of settings
  • Deploying and configuring the Zoom desktop client
    • Command-line deployment
    • Intune deployment
  • Configuration options for the Zoom desktop client
    • General settings
    • Meeting settings
    • Chat settings
    • Other parameters
  • Uninstall switches
  • Configuration options for Zoom Rooms for Windows
    • System options
  • Configuration options for the Outlook Plugin for Windows
  • Active Directory Administrative Template configuration

Learn to install Zoom with preconfigured settings for Mac.

Prerequisites

  • Windows desktop client MSI version 
  • Zoom Rooms for Windows

Note:

Here are some switches that require the Zoom IT Installer latest version.

Downloading the MSI installer

  1. Go to the Download Center
  2. Click on Download for IT Admin or download directly from https://www.zoom.us/client/latest/ZoomInstallerFull.msi

Priority of settings

There are multiple places where settings can be configured. Some can only be configured by Zoom admins or IT admins, and some by end users. Zoom will prioritize setting conflicts as follows:

  • Deploying settings via MSI/GPO with zConfig
  • Web settings locked for the group or account
  • Client setting selected by the user
  • Setting deployed via MSI/GPO with zRecommend
  • Web setting that are not locked

Deploying and configuring the Zoom desktop client

Command-line deployment

Install:

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log

Silent install:

msiexec /i ZoomInstallerFull.msi /quiet /qn /norestart /log install.log

Wait until in-progress meeting ends before installing:

msiexec /i ZoomInstallerFull.msi /norestart MSIRESTARTMANAGERCONTROL=”Disable”

Silent auto-start:

Disabled by default, this option makes the desktop client automatically and silently start with Windows. To enable, append zSilentStart=”true” to the end of your install choice.

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log zSilentStart=”true”

No desktop shortcut:

Disabled by default, this option prevents the creation of a desktop shortcut on install or update. To enable, append zNoDesktopShortCut=”true” to the end of your install choice.

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZNoDesktopShortCut=”true”

Preconfigure SSO URL:

Disabled by default, this option allows you to preconfigure the SSO URL. To set a URL, append zSSOHost=”vanity_URL” to the end of your install choice. For example, hooli.zoom.us can be set with any of the following formats:

  • “hooli”
  • “https://hooli”
  • “hooli.zoom.us”

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log zSSOHost=”vanity_URL”

Auto-update:

The Check for Updates option will be disabled by default, preventing users from checking for and installing Zoom client updates. If auto-update is enabled, users will be able to check for updates in the client without requiring elevated admin rights. Adding ZoomAutoUpdate=”true” to your install choice will enable and allow users to update the Zoom client:

msiexec /package  ZoomInstallerFull. msi /lex zoommsi.log ZoomAutoUpdate=”true”

Notes:

  • The auto-update feature is not a true auto-update feature. The desktop client will not automatically stay on the latest client version, but only allow the user to manually check for updates. The auto-update options below include EnableSilentAutoUpdate and AlwaysCheckLatestVersion.
  • The auto-update switch will not work in the VDI client.

Advanced Sharing Service:

By default, this option disables this service, which can prevent upgrading prompts that ask for admin credentials. The auto-update experience may be impaired slightly if this option is disabled. Adding DisableAdvancedSharingService=true to your install choice will disable advanced sharing.

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log DisableAdvancedSharingService=true

Firewall port start and end:

Zoom client firewall rules include inbound and outbound traffic. Zoom does not recommend enabling FirewallPortStart without FirewallPortEnd, as they both need to be configured together.

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log FirewallPortStart=”7200″ FirewallPortEnd=”17210″

Additional Configuration Options

zConfig:

You can enable additional options by appending the ZConfig parameter to your install choice. Multiple options should be separated by ‘;’:

msiexec /package ZoomInstaller.msi /norestart /lex msi.log ZConfig=”account=your_account_id;nogoogle=1;nofacebook=1;login_domain=yourcompany.com&yourcompany2.com”

In the following table, you can find additional ZConfig options.

Allow users to change settings:

to deploy settings but allow users to change them within the Zoom desktop client, deploy with “ZRecommend” instead of “ZConfig”. For example, msiexec /i ZoomInstallerFull.msi ZRecommend=”AudioAutoAdjust=1″

If you want to force certain settings, but allow users to change other default settings, use both ZConfig and ZRecommend . For example, msiexec /i ZoomInstallerFull.msi  ZConfig=”nogoogle=1″ ZRecommend=”AudioAutoAdjust=1″

Note:

When a setting is set for both ZConfig and ZRecommend, ZConfig will lock the setting, and it cannot be changed by the user.

Intune deployment

  1. Sign in to Microsoft Intune.
  2. Select Client apps.
  3. Select Apps.
  4. Click on Add.
  5. Select Line-of-business app as the App type, then click Select.
  6. Select the package file for the app.
  7. Select ZoomInstallFull.msi from the list of files.
  8. Press OK.
  9. In the App information tab enter the following:
    • Description- Enter the description of the app, i.e Zoom Meeting app.
    • Publisher- Choose Zoom Video Communications.
    • Select the device to install the app.
    • Command-line arguments- Type any MSI installation switches.
      • When you want to enable default settings that need to be locked, start each setting switch with ZConfig. Ex. ZConfig=”nogoogle=1”.
      • Start each setting switch with ZRecommend to enable default settings that users can change. Ex. ZRecommend=”AudioAutoAdjust=1”.
      • Click Next.
  10. Add any Scope tags you wish.
  11. Then click Next.
  12. Specify whether the app is required for specific user groups, all users, or all devices.
  13. Click Next.
  14. Review the deployment summary, then click Create.

Configuration options

Note:

The following registry entries will be found in the following locations:

  • 32-bit version: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\ZoomUMX\
  • 64-bit version: HKEY_LOCAL_MACHINE\SOFTWARE\ZoomUMX\

General settings

Description Default state and value MSI option Value type
Remove Google login option Disabled, 0 NoGoogle Boolean
Remove Facebook login option Disabled, 0 NoFacebook Boolean
Remove Email login option Disabled, 0 DisableLoginWithEmail Boolean
Remove SSO login option Disabled, 0 NoSSO Boolean
Require new SSO login upon client start Disabled, 0 DisableKeepSignedInWithSSO Boolean
Require new Google login upon client start Disabled, 0 DisableKeepSignedInWithGoogle Boolean
Require new Facebook login upon client start Disabled, 0 DisableKeepSignedInWithFacebook Boolean
Set and lock the default SSO URL for a client login

For example, hooli.zoom.us would be set as ForceSSOUrl=hooli

Disabled ForceSSOUrl=your_company String
Prevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL. Disabled, 0 DisableAutoLaunchSSO Boolean
Defaults login to use SSO Disabled, 0 AutoSSOLogin Boolean
Block connections to untrusted SSL certificates Enabled, 1 BlockUntrustedSSLCert Boolean
Embed a specified user agent string for all HTTP requests from Zoom client Disabled EmbedUserAgentString String
Disable UAC prompt when logging into Zoom Enabled, 1 AddFWException Boolean
Minimize Zoom to system tray Enabled, 1 Min2Tray Boolean
Auto-start Zoom when Windows starts Disabled, 0 ZoomAutoStart Boolean
Auto-start Zoom silently when Windows starts Disabled, 0 zSilentStart Boolean
Allows the desktop client to silently check for updates and, if user’s version is lower than the stable version set by Zoom, install upon launching the client.

This option requires the AutoUpdate option to be enabled.

Enabled, 1 EnableSilentAutoUpdate Boolean
Allows the desktop client to check for updates and, if user’s version is lower than the latest version set by Zoom, prompt the user to install the update.

This option requires the AutoUpdate option to be enabled.

Disabled, 0 AlwaysCheckLatestVersion Boolean
Allows the control of the cadence of updates applied to the desktop client.

Slow (0): fewer updates and better stability
Fast (1): newest features and updates

Slow (0) SetUpdatingChannel Boolean
Prevents the desktop client from upgrading to the 64-bit version automatically, if the 32-bit version is installed on a 64-bit system. Disabled, 0 DisableUpdateTo64Bit Boolean
Do not create a desktop shortcut for Zoom Disabled, 0 zNoDesktopShortCut Boolean
Set the email address domain that users can login with Disabled Login_Domain, domain String
Forces users to be signed in before joining a meeting from the app. Users can be signed-in on the web portal when joining through join URL. Disabled, 0 EnforceSignInToJoin Boolean
Require the client to be logged in to a Zoom account before joining any meeting. Disabled EnforceAppSignInToJoin Boolean
Set account IDs (A) that the client is restricted to join meetings hosted by specific accounts Disabled, 0 Account, your_account_id String
Enforce internal meeting authentication (B) Disabled SetDevicePolicyToken, device_token String
Keep the user signed in to the client when it is restarted (email login only) Disabled, 0 KeepSignedIn Boolean
Zoom client will automatically open and after system reboot. Disabled, 0 AutoStartAfterReboot Boolean
Zoom client will start in the system tray after system reboot. Disabled, 0 AutoStartInSystemTray Boolean
Sets the web domain for logging in or joining a meeting. By default, the value is https://zoom.us or https://zoom.com Disabled, empty SetWebDomain, domain String
Default to Portrait Mode upon opening Zoom Disabled, 0 DefaultUsePortraitView Boolean
Share sound when screen sharing to a Zoom Room Enabled, 1 PresentToRoomWithAudio Boolean
Displays the Call Room System button on the home screen of the Zoom client Disabled, 0 EnableStartMeetingWithRoomSystem Boolean
Display the caller name for Room system being invited to Zoom meeting Disabled, 0 AppendCallerNameForRoomSystem Boolean
Enables HID control of USB devices by the Zoom client Enabled, 1 EnableHIDControl Boolean
If enabled, the client will use the following ports for media transmission:

Audio: 8803
Screen share: 8802
Video: 8801

Disabled, 0 EnableIndependentDataPort Boolean
Use embed browser in the client for SSO Disabled, 0 EnableEmbedBrowserForSSO Boolean
Automatically send logs, when there is a critical-failure issue Disabled, 0 EnableAutoUploadDumps Boolean
Show Zoom contact status in Outlook, and sets Zoom as the default chat, meeting, and phone app in Outlook. Disabled, 0 IntegrateZoomWithOutlook Boolean
Enable touch up my appearance Disabled, 0 EnableFaceBeauty Boolean
Remote control all applications Disabled, 0 RemoteControlAllApp Boolean
Zoom client starts an elevated video process to support advanced DSCP marking Disabled, 0 EnableElevateForAdvDSCP Boolean
When enabled, screen share traffic is sent over TCP instead of UDP. Disabled, 0 ShareSessionDisableUDP Boolean
Prevent audio traffic over proxies Disabled, 0 DisableAudioOverProxy Boolean
Prevent video traffic over proxies Disabled, 0 DisableVideoOverProxy Boolean
Prevent screen sharing traffic over proxies Disabled, 0 DisableSharingOverproxy Boolean
Set a proxy server for the client as named proxy.

Example: server: port

Disabled ProxyServer, proxy_address String
Set proxy server to client with PAC URL Disabled ProxyPac, your_pac_url String
Set proxy bypass rule for the Zoom client Disabled ProxyBypass, bypass_rule String
Remove noise from video feeds when processing. Enabled, 1 EnableTemporalDeNoise Boolean
Use hardware acceleration for video processing. Enabled, 1 EnableGPUComputeUtilization Boolean
Use hardware acceleration for video processing, when sending video. Enabled, 1 EnableHardwareAccForVideoSend Boolean
Use hardware acceleration for video processing, when receiving video. Enabled, 1 EnableHardwareAccForVideoReceive Boolean
Ignore bandwidth limited set on web settings. Useful for exceptions. Disabled, 0 IgnoreBandwidthLimits Boolean
Allow specific URLs to be trusted and bypass the untrusted certificate prompt if the certificate is revoked. Multiple domains should be separated by “;”, for example “hooli.com;hooli.org” Disabled, empty SetNoRevocationCheckUrls String
Hide Zoom Apps quick launch button in the Zoom interface. Disabled, 0 DisableZoomApps Boolean

Notes:

  • (A) Please contact Support to obtain your account ID.
  • For this feature to be enabled, please have an account owner or admin contact Support. To view and edit Device Policy Management, the owner must also edit a role. Once the role has been edited, the owner can retrieve the corresponding token.

Meeting settings

Description Default state and value MSI option Value type
Turn off camera when joining a Meeting Disabled, 0 DisableVideo Boolean
When joining a meeting, the meeting window launches in a fullscreen window by default Enabled, 1 AutoFullScreenWhenViewShare Boolean
Automatically adjusts screen share content to fit the viewer’s screen Enabled, 1 AutoFitWhenViewShare Boolean
Use HD video when joining a meeting Disabled, 0 Use720pByDefault Boolean
Automatically enable dual monitor Disabled, 0 UseDualMonitor Boolean
Prevent full screen when starting or joining a meeting Disabled, 0 FullScreenWhenJoin Boolean
Always show meeting controls (Enables Always show meeting controls) Enabled, 1 AutoHideToolbar Boolean
Hide non-video participants by default Disabled, 0 HideNoVideoUsers Boolean
Always mute microphone when joining a meeting Disabled, 0 MuteVoipWhenJoin Boolean
Auto-connect audio with computer audio when joining a meeting Disabled, 0 AutoJoinVOIP Boolean
Set audio signal processing for Windows audio devices

Auto – 0
Off – 1
On – 2

Auto, 0 SetAudioSignalProcessType String
Set noise suppression level

Auto – 0
Low -1
Medium – 2
High – 3

 Auto, 0 SetSuppressBackgroundNoiseLevel String
Show the length of time that the user has been in a meeting Disabled, 0 ShowConnectedTime Boolean
Confirm before leaving a meeting Enabled, 1 ConfirmWhenLeave Boolean
Disable Screen Share when starting or joining a meeting Disabled, 0 DisableScreenShare Boolean
Disable Window’s Aero Mode on Windows 7 Disabled, 0 NoAeroOnWin7 Boolean
Set the default recording location for local recordings Documents folder RecordPath, C:/your_recording_path String
Automatically adjust microphone settings Enabled, 1 AudioAutoAdjust Boolean
Controls the Original Audio setting for the microphone Disabled, 0 EnableOriginalSound Boolean
Always use PMI for instant meetings Disabled, 0 UsePMI Boolean
Disable in-meeting chat Disabled, 0 zDisableChat Boolean
Disable in-meeting file transfer (sending or receiving files) Disabled, 0 zDisableFT Boolean
Disable in-meeting 3rd party file transfer Disabled, 0 DisableMeeting3rdPartyFileStorage Boolean
Disable local recording Disabled, 0 zDisableLocalRecord Boolean
Disable cloud recording Disabled, 0 zDisableCMR Boolean
Disable sending video Disabled, 0 zDisableSendVideo Boolean
Disable receiving video Disabled, 0 zDisableRecvVideo Boolean
Disables send and receiving of video Disabled, 0 zDisableVideo Boolean
Enable mirroring of your video Enabled, 1 EnableMirrorEffect Boolean
Displays the Call Room System button on the home screen of the Zoom client Disabled, 0 EnableStartMeetingWithRoomSystem Boolean
Client will optimize screen sharing for video clip when sharing directly to a Zoom Room. Enabled, 1 PresentToRoomOptimizeVideo Boolean
Set sharing option when sharing directly to a Zoom Room.

0 – Show all sharing options

1 – Automatically share desktop

1 PresentToRoomOption Boolean
Set sharing option when sharing directly to a Zoom Room within a meeting.

0 – Show all sharing options

1 – Automatically share desktop

0 PresentInMeetingOption Boolean
Set maximum sending bandwidth

Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.

Disabled BandwidthLimitUp, amount
(all values in Kbps)
String
Set maximum receiving bandwidth

Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.

Disabled BandwidthLimitDown, amount
(all values in Kbps)
String
Split traffic across different ports for easier identification
Video share: 8801
Screensharing: 8802
Audio: 8803
Disabled, 0 EnableIndependentDataPort Boolean
Always show the video preview when joining a meeting Enabled, 1 AlwaysShowVideoPreviewDialog Boolean
Remove Computer Audio from the Audio Options Disabled, 0 DisableComputerAudio Boolean
Automatically mute the microphone, when the screen is locked during meeting Enabled, 1 MuteWhenLockScreen Boolean
Use default system speakers in Windows Disabled, 0 SetUseSystemDefaultSpeakerForVoip Boolean
Use default system microphone in Windows Disabled, 0 SetUseSystemDefaultMicForVoip Boolean
Use Side-by-Side Mode for viewing a shared screen Disabled, 0 EnableSplitScreen Boolean
Disable Remote Control Disabled, 0 DisableRemoteControl Boolean
Disable Remote Support Enabled, 1 DisableRemoteSupport Boolean
Disable the use of closed captioning Disabled, 0 DisableClosedCaptioning Boolean
Disable the use of manual, user-entered captioning Disabled, 0 DisableManualClosedCaptioning Boolean
Disable the use of Q&A in webinars Disabled, 0 DisableQnA Boolean
Disable the use of slide control Disabled, 0 DisableSlideControl Boolean
Prevent incoming call notifications while in a meeting Disabled, 0 HidePhoneInComingCallWhileInMeeting Boolean
Allow clipboard access during remote control sessions Disabled, 0 EnableShareClipboardWhenRemoteControl Boolean
Disable Virtual Background Disabled, 0 DisableVirtualBkgnd Boolean
Disable video filters Disabled, 0 DisableVideoFilters Boolean
Set the specified screen capture mode:

0 – Auto
1 – Legacy operating systems
2 – Share with window filtering
3 – Advanced share with window filtering
4 – Advanced share without window filtering

Auto, 0 SetScreenCaptureMode String
Disable GPU Acceleration Disabled, 0 LegacyCaptureMode Boolean
Disable whiteboard feature Disabled, 0 DisableWhiteBoard Boolean
Disables the option to share Desktop when screen sharing Disabled, 0 DisableDesktopShare Boolean
Disables direct share with Zoom Rooms option Disabled, 0 DisableDirectShare Boolean
Provide Optimize for video clip option when sharing Enabled, 1 EnableShareVideo Boolean
Share computer audio feature Disabled, 0 EnableShareAudio Boolean
Silence system notifications when sharing desktop Enabled, 1 EnableDoNotDisturbInSharing Boolean
Show Zoom windows when screen sharing Disabled, 0 ShowZoomWinWhenSharing Boolean
Show self as the active speaker when speaking Disabled, 0 EnableSpotlightSelf Boolean
Set max number of participants displayed in Gallery View to 49 participants per screen Disabled, 0 Enable49video Boolean
Display reminders for upcoming meetings Disabled, 0 EnableRemindMeetingTime Boolean
Sets the specified video rendering method using the following string variables:

0 – Auto
1 – Direct3D11 Flip Mode
2 – Direct3D11
3 – Direct3D9
4 – GDI

Auto, 0 VideoRenderMethod, 0 String

Chat settings

Description Default state and value MSI option Value type
Disable Link Preview Enabled, 1 zDisableIMLinkPreview Boolean
Move messages with new replies to the bottom of the chat/channel Disabled, 0 SetMessengerDoNotDropThread Boolean
Send voice message option Enabled, 1 ShowVoiceMessageButton Boolean
Show notification banner on screen until dismissed Disabled, 0 AlwaysShowIMNotificationBanner Boolean
Control the audio notifications when an IM message is received Enabled, 1 PlaySoundForIMMessage Boolean
Control if the message previews in system notifications when an IM message is received Enabled, 1 ShowIMMessagePreview Boolean
Control if IM message system notifications are muted when in a meeting Enabled, 1 MuteIMNotificationWhenInMeeting Boolean

 

Other parameters

Meeting Options: Disabled by default. To require these settings, append ZConfig=”kCmdParam_InstallOption=X”. X represents a numeric value.

The values and options enabled are as follows:

Value Option
1 Turn Off Camera when Joining a Meeting
2 Automatically Join VoIP
4 Automatically enable dual monitor
8 Default to login with SSO
16 Automatically enter full screen when viewing shared content
32 Automatically fit to window when viewing shared content
64 Enable 720p by default
128 Remote control all applications

To enable multiple settings, add the values. For example, to enable Automatically Join VoIP (2) AND 720p by default (64), set the ZoomInstall option to 66:

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZConfig=”kCmdParam_InstallOption=66″

You can also configure Microsoft command line options.

Uninstall switches

If you would like to uninstall Zoom completely, please use the Clean Zoom uninstaller. In most cases, using the clean uninstaller is not necessary when updating Zoom, because deploying the new version will replace the old one.

The following switches are available when running the installer:

Command Function
/silent Removes Zoom silently
/keep_outlook_plugin Removes Zoom, but leaves the Outlook Plugin installed
/keep_lync_plugin Removes Zoom, but leaves the Lync/Skype for Business Plugin installed
/keep_notes_plugin Removes Zoom, but leaves the Notes Plugin installed
/vdi_clean Removes the vdi package

Note:

With the clean uninstaller, Zoom’s client and Outlook plugin will be completely removed. The Outlook add-in, Chrome/Firefox extensions, and G Suite add-on are unaffected.

Configuration options for Zoom Rooms for Windows

Description Default state and value MSI option Value type
Verify SSL certificate Disabled, 0 EnableSSLVerification Boolean
Automatically accept the GDPR license Disabled, 0 AcceptGDPR Boolean
Install updates silently without displaying progress bar Disabled, 0 Silent Boolean
Automatically login with username and password Enabled, 1 SystemAutoLogin Boolean

 

Silent Install with Auto login and Silent Updates: msiexec /i ZoomRoomsInstaller.msi /quiet  ACCEPTGDPR=true SILENT=true SYSTEMAUTOLOGIN=true SYSTEMUSERNAME=”windows user name” SYSTEMPASSWORD=”windows password”

System Options

By default, these options are disabled. Enable by appending SYSTEMOPTION=X (X represents a numeric value. Here are the values and options):

Value Option
1 Automatically lock the screen
2 Disable password upon wakeup
4 Disable Cortana
8 Disable notifications
16 Disable Windows updates
32 Enable High Performance Power
64 Disable Hibernation
128 Never Sleep
256 Never Turn Off Display

Outlook Plugin for Windows configuration options

Description Default state and value MSI option Value type
Always use PMI by default Disabled, 0 UsePMI Boolean
Allow the user to check for updates for the Outlook plugin Enabled, 1 AutoUpdate Boolean
Allow standard user updating. Ignored if AutoUpdate is disabled. Disabled, 0 StandardUserUpdate Boolean

Configuration of Active Directory Administrative Templates

Please consult our list of available Group Policies and templates to see a breakdown of the policies and options available for configuring.