Mass deployment with preconfigured settings for Windows in Zoom

Zoom Desktop Client can be configured in three different ways for Windows: via MSI installer for configuration and installation, via Active Directory administrative templates utilizing Group Policy, or via registry keys.

Zoom Rooms for Windows can also be configured with a Group Policy template or registry key using Active Directory administrative templates.

You can deploy Zoom using GPO or SCCM if you use the MSI installer. Install the client by using a startup script if you’re installing via GPO. Install using a logon script if you also want to deploy the Outlook plugin via GPO.

Upon deployment, Zoom administrators can lock specific features and settings by using Active Directory Administrative Templates or registry keys.

Note:

Installations of MSI require elevated administrative rights.

This article covers:

• Downloading the MSI installer
• Priority of settings
• Deploying and configuring the Zoom desktop client
  • Command-line deployment
  • Intune deployment
• Configuration options for the Zoom desktop client
  • General settings
  • Meeting settings
  • Chat settings
  • Other parameters
• Uninstall switches
• Configuration options for Zoom Rooms for Windows
  • System options
• Configuration options for the Outlook Plugin for Windows
• Active Directory Administrative Template configuration

Learn to install Zoom with preconfigured settings for Mac.

Prerequisites

• Windows desktop client MSI version 
• Zoom Rooms for Windows

Note:

Here are some switches that require the Zoom IT Installer latest version.

Downloading the MSI installer

1. Go to the Download Center
2. Click on Download for IT Admin or download directly from https://www.zoom.us/client/latest/ZoomInstallerFull.msi

Priority of settings

There are multiple places where settings can be configured. Some can only be configured by Zoom admins or IT admins, and some by end users. Zoom will prioritize setting conflicts as follows:

• Deploying settings via MSI/GPO with zConfig
• Web settings locked for the group or account
• Client setting selected by the user
• Setting deployed via MSI/GPO with zRecommend
• Web setting that are not locked

Deploying and configuring the Zoom desktop client

Command-line deployment

Install:

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log

Silent install:

msiexec /i ZoomInstallerFull.msi /quiet /qn /norestart /log install.log

Wait until in-progress meeting ends before installing:

msiexec /i ZoomInstallerFull.msi /norestart MSIRESTARTMANAGERCONTROL=”Disable”

Silent auto-start:

Disabled by default, this option makes the desktop client automatically and silently start with Windows. To enable, append zSilentStart=”true” to the end of your install choice.

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log zSilentStart=”true”

No desktop shortcut:

Disabled by default, this option prevents the creation of a desktop shortcut on install or update. To enable, append zNoDesktopShortCut=”true” to the end of your install choice.

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZNoDesktopShortCut=”true”

Preconfigure SSO URL:

Disabled by default, this option allows you to preconfigure the SSO URL. To set a URL, append zSSOHost=”vanity_URL” to the end of your install choice. For example, hooli.zoom.us can be set with any of the following formats:

• “hooli”
• “https://hooli”
• “hooli.zoom.us”

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log zSSOHost=”vanity_URL”

Auto-update:

The Check for Updates option will be disabled by default, preventing users from checking for and installing Zoom client updates. If auto-update is enabled, users will be able to check for updates in the client without requiring elevated admin rights. Adding ZoomAutoUpdate=”true” to your install choice will enable and allow users to update the Zoom client:

msiexec /package  ZoomInstallerFull. msi /lex zoommsi.log ZoomAutoUpdate=”true”

Notes:

• The auto-update feature is not a true auto-update feature. The desktop client will not automatically stay on the latest client version, but only allow the user to manually check for updates. The auto-update options below include EnableSilentAutoUpdate and AlwaysCheckLatestVersion.
• The auto-update switch will not work in the VDI client.

Advanced Sharing Service:

By default, this option disables this service, which can prevent upgrading prompts that ask for admin credentials. The auto-update experience may be impaired slightly if this option is disabled. Adding DisableAdvancedSharingService=true to your install choice will disable advanced sharing.

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log DisableAdvancedSharingService=true

Firewall port start and end:

Zoom client firewall rules include inbound and outbound traffic. Zoom does not recommend enabling FirewallPortStart without FirewallPortEnd, as they both need to be configured together.

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log FirewallPortStart=”7200″ FirewallPortEnd=”17210″

Additional Configuration Options

zConfig:

You can enable additional options by appending the ZConfig parameter to your install choice. Multiple options should be separated by ‘;’:

msiexec /package ZoomInstaller.msi /norestart /lex msi.log ZConfig=”account=your_account_id;nogoogle=1;nofacebook=1;login_domain=yourcompany.com&yourcompany2.com”

In the following table, you can find additional ZConfig options.

Allow users to change settings:

to deploy settings but allow users to change them within the Zoom desktop client, deploy with “ZRecommend” instead of “ZConfig”. For example, msiexec /i ZoomInstallerFull.msi ZRecommend=”AudioAutoAdjust=1″

If you want to force certain settings, but allow users to change other default settings, use both ZConfig and ZRecommend . For example, msiexec /i ZoomInstallerFull.msi  ZConfig=”nogoogle=1″ ZRecommend=”AudioAutoAdjust=1″

Note:

When a setting is set for both ZConfig and ZRecommend, ZConfig will lock the setting, and it cannot be changed by the user.

Intune deployment

1. Sign in to Microsoft Intune.
2. Select Client apps.
3. Select Apps.
4. Click on Add.
5. Select Line-of-business app as the App type, then click Select.
6. Select the package file for the app.
7. Select ZoomInstallFull.msi from the list of files.
8. Press OK.
9. In the App information tab enter the following:
   • Description- Enter the description of the app, i.e Zoom Meeting app.
   • Publisher- Choose Zoom Video Communications.
   • Select the device to install the app.
   • Command-line arguments- Type any MSI installation switches.
     • When you want to enable default settings that need to be locked, start each setting switch with ZConfig. Ex. ZConfig=”nogoogle=1”.
     • Start each setting switch with ZRecommend to enable default settings that users can change. Ex. ZRecommend=”AudioAutoAdjust=1”.
     • Click Next.
10. Add any Scope tags you wish.
11. Then click Next.
12. Specify whether the app is required for specific user groups, all users, or all devices.
13. Click Next.
14. Review the deployment summary, then click Create.

Configuration options

Note:

The following registry entries will be found in the following locations:

• 32-bit version: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\ZoomUMX\
• 64-bit version: HKEY_LOCAL_MACHINE\SOFTWARE\ZoomUMX\

General settings

Notes:

• (A) Please contact Support to obtain your account ID.
• For this feature to be enabled, please have an account owner or admin contact Support. To view and edit Device Policy Management, the owner must also edit a role. Once the role has been edited, the owner can retrieve the corresponding token.

Meeting settings

Chat settings

Other parameters

Meeting Options: Disabled by default. To require these settings, append ZConfig=”kCmdParam_InstallOption=X”. X represents a numeric value.

The values and options enabled are as follows:

To enable multiple settings, add the values. For example, to enable Automatically Join VoIP (2) AND 720p by default (64), set the ZoomInstall option to 66:

msiexec /package ZoomInstallerFull.msi /lex zoommsi.log ZConfig=”kCmdParam_InstallOption=66″

You can also configure Microsoft command line options.

Uninstall switches

If you would like to uninstall Zoom completely, please use the Clean Zoom uninstaller. In most cases, using the clean uninstaller is not necessary when updating Zoom, because deploying the new version will replace the old one.

The following switches are available when running the installer:

Note:

With the clean uninstaller, Zoom’s client and Outlook plugin will be completely removed. The Outlook add-in, Chrome/Firefox extensions, and G Suite add-on are unaffected.

Configuration options for Zoom Rooms for Windows

Silent Install with Auto login and Silent Updates: msiexec /i ZoomRoomsInstaller.msi /quiet  ACCEPTGDPR=true SILENT=true SYSTEMAUTOLOGIN=true SYSTEMUSERNAME=”windows user name” SYSTEMPASSWORD=”windows password”

System Options

By default, these options are disabled. Enable by appending SYSTEMOPTION=X (X represents a numeric value. Here are the values and options):

Outlook Plugin for Windows configuration options

Configuration of Active Directory Administrative Templates

Please consult our list of available Group Policies and templates to see a breakdown of the policies and options available for configuring.