Mass-deploying with preconfigured settings for macOS

IT Admin may choose to install Zoom with preconfigured settings on the Zoom desktop client for macOS. This installation requires configuring a .plist file and installing it along with the IT Admins Installer for macOS.

Settings can be enforced or set as just the default, which the end-user can still modify after deployment.

The desktop client can be enrolled in and managed through Zoom Device Management, which allows you to centrally control desktop client and mobile app settings in the Zoom web portal. 

Note: The VDI Host Installer is an MSI file type that can use the same switches as the standard client MSI installer. It can be deployed through normal software and device management tools. The VDI Client will respond to the same MSI configuration as the non-VDI client and can be configured accordingly, except for the AutoUpdate switch.

This article covers:

Learn to install Zoom with preconfigured settings for Windows devices, Android devices, and iOS devices. You can also use Zoom’s own Device Management platform to centrally configure desktop client and mobile app settings.

Prerequisites for using the IT admin installer

How to download the admin desktop client installer

  1. Go to the Zoom Download Center
  2. Click on Download for IT Admin, and then click the Download button under Zoom Client for Meetings.

Priority of settings

Settings can be configured in multiple places. While some can only be configured by the Zoom Admin or IT Admin, some settings can be configured by the end-user as well. If settings conflict, Zoom will use the following priority:

  1. Settings deployed and locked through ZDM
  2. Setting deployed via us.zoom.config.plist NOT set under PackageRecommend
  3. Web setting locked for the account or group
  4. Client setting selected by the user
  5. Settings deployed via us.zoom.config.plist set under PackageRecommend
  6. Web settings that are not locked

How to create and configure the .plist file

If you want to configure options for the Zoom desktop client on macOS, you need to create a .plist file. If you don't configure the .plist file, Zoom will be deployed with the default configuration.

How to require and recommend default settings

Settings configured through plist are either enforced or set as the default, but allow users to change them within the Zoom desktop client.

For example, if you want to have the Automatically enter full screen when viewing shared content enabled by default, but completely disallow Google or Facebook logins, the plist file would be:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>NoGoogle</key>
<true/>
<key>NoFacebook</key>
<true/>
<key>PackageRecommend</key>
<dict>
<key>zAutoFullScreenWhenViewShare</key>
<true/>
</dict>
</dict>
</plist>

Available configuration options

Plist keyDescriptionDefault state and valueValue type
Install and update
zAutoUpdateEnable updates through the client by users. When disabled, the Check for Updates button is also hidden.
Please see AutoUpdate section for important details.
Disabled, 0Boolean
SetUpdatingChannelControl the cadence of updates applied to the desktop client on versions between 5.8.6 and 5.10.1:
Slow (0): fewer updates and better stability.
Fast (1): newest features and updates.
Please see AutoUpdate section for important details.
Slow, 0Boolean
DisableDaemonInstallControls the use of the daemon helper to install updates, which bypasses the need to enter admin credentials when upgrading. This option requires AutoUpdate option to be enabled, and will fail if not enabled.Disabled, 0Boolean
SetEnrollToken4CloudMDM, token Enroll your device into Zoom Device Management with a token provided from the web portal. Disabled, (empty)String
DisableZoomOnboarding

Disables the onboarding experience displayed the first time the Zoom desktop client is installed.

(0) - Allow onboarding experience. 

(1) - Disable onboarding experience. 

Disabled, 0Boolean
Network
EnableDiagnostic
Controls the ability for the desktop client to access the Network Connectivity Tool, which allows a user to test their network connection with Zoom services.Enabled, 1Boolean
BlockUntrustedSSLCertBlock connections to untrusted SSL certificates. Enabled, 1Boolean
DisableCertPinDisable Certificate Pinning.Disabled, 0Boolean
ProxyPAC, your_pac_urlSet proxy server for desktop client with PAC URL. Disabled, (empty)String
ProxyServer, proxy_addressSet a proxy server for desktop client as named proxy.
Example: server: port
Disabled, (empty)String
ProxyBypass, bypass_ruleSet proxy bypass rule for the desktop client. Disabled, (empty)String
DisableAudioOverProxyPrevent audio traffic over proxies. Disabled, 0Boolean
DisableVideoOverProxyPrevent video traffic over proxies.Disabled, 0Boolean
DisableSharingOverProxyPrevent screen sharing traffic over proxies.Disabled, 0Boolean
BandwidthLimitUpSet maximum sending bandwidth for the desktop client. 
Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.
Disabled, (empty)String (all values in Kbps)
BandwidthLimitDownSet maximum receiving bandwidth for the desktop client.
Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.
Disabled, (empty)String (all values in Kbps)
IgnoreBandwidthLimitsIgnore bandwidth limit set on web settings. (Useful for exceptions to bandwidth restrictions)Disabled, 0Boolean
EnableIndependentDataPortIf enabled, the client will use the following ports for media transmission:
Audio: 8803
Screen share: 8802
Video: 8801
Disabled, 0Boolean
DisableDirectConnection2WebDisable all direct connections to Zoom web service.Disabled, 0Boolean
Authentication
NoFacebookRemove Facebook login option.Disabled, 0Boolean
NoGoogleRemove Google login option.Disabled, 0Boolean
EnableAppleLoginAllow access to Apple login option. Enabled, 1Boolean
NoSSORemove SSO login option.Disabled, 0Boolean
DisableLoginWithEmailRemove Email login option.Disabled, 0Boolean
DisableUserSignUp
Disable the Sign Up option on the Zoom app, which would otherwise be displayed with Join a Meeting and Sign In options upon opening the Zoom app.Disabled, 0Boolean
DisableKeepSignedInWithSSORequire fresh SSO login upon client start.Disabled, 0Boolean
DisableKeepSignedInWithGoogleRequire fresh Google login upon client start.Disabled, 0Boolean
DisableKeepSignedInWithFacebookRequire fresh Facebook login upon client start.Disabled, 0Boolean
KeepSignedInKeep the user signed in to the client when relaunched.
(Email login only)
Disabled, 0Boolean
zAutoSSOLoginDefaults login to SSO.Disabled, 0Boolean
zSSOHostSet the default SSO URL for SSO login.
For example, hooli.zoom.us would be set as "zSSOHost=hooli".
Disabled, (empty)String
ForceSSOURLSet and lock the default SSO URL for SSO login.
For example, hooli.zoom.us would be set as "ForceSSOUrl=hooli".
Disabled, (empty)String
EnableEmbedBrowserForSSOUse embedded browser in the client for SSO.Disabled, 0Boolean
SetWebDomainSets the web domain for logging in or joining a meeting.
By default, the value is https://zoom.us or https://zoom.com.
Disabled, (empty)String
DisableAutoLaunchSSOPrevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL.Disabled, 0Boolean
EnablePhoneLoginEnables login with phone authentication. (A) Disabled, 0Boolean
EnableAlipayLoginEnables login with Alipay authentication. (A) Disabled, 0Boolean
EnablQQLoginEnables login with QQ authentication. (A) Disabled, 0Boolean
EnableWeChatLoginEnables login with WeChat authentication. (A) Disabled, 0Boolean
Account, your account IDRestrict the client to only join meetings hosted by the specified account IDs. (B) Disabled, (empty)String
Login_DomainSet the email address domain that users can login with, each separated by "&". 
Example: zoom.us & hooli.com
Note: The "&" must be entered as an escape character "&amp;", or use CDATA to wrap the entire string. This only applies to plist mass deployment.
Disabled, (empty)String
EnableCloudSwitchEnable the option to switch between Zoom commercial (default) and Zoom for Gov.Disabled, 0Boolean
EnforceSignInToJoinRequire users to be authenticated before joining a meeting with the desktop client. Authentication can take place through the the web portal, if joining through join URL.

Note: This policy will interfere with joining meetings and webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well.
Disabled, 0Boolean
EnforceAppSignInToJoinRequire authentication on the desktop client to join any meeting on the desktop client. 

Note: This policy will interfere with joining meetings and webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well.
Disabled, 0Boolean
EnforceSignInToJoinForWebinarRequire users to be authenticated before joining a webinar with the desktop client.  Authentication can take place through the the web portal, if joining through join URL.

Note: This policy will interfere with joining webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well.
Disabled, 0Boolean
EnforceAppSignInToJoinForWebinar

Require authentication on the desktop client to join any webinar on the desktop client.

Note: This policy will interfere with joining webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well.

Disabled, 0Boolean
SetDevicePolicyToken, device_tokenRequire internal meeting authentication. (C) Disabled, (empty)String
General meeting and client options
zDualMonitorOnEnable dual monitor mode.Disabled, 0Boolean
FullScreenWhenJoinWhen starting or joining a meeting, the meeting window will enter full-screen.Disabled, 0Boolean
AutoHideToolBar
Set use of Always show meeting controls setting.Enabled, 0Boolean
DefaultUsePortraitViewDefault to Portrait Mode upon opening Zoom.Disabled, 0Boolean
DisableClosedCaptioningDisable the use of all closed captioning.Disabled, 0Boolean
DisableManualClosedCaptioningDisable the use of manual, user-entered captioning.Disabled, 0Boolean
DisableQnADisable the use of Q&A in webinars.Disabled, 0Boolean
DisableMeetingReactionsDisable the use of Meeting reactions.Disabled, 0Boolean
DisableNonVerbalFeedbackDisable the use of Non-verbal feedback.Disabled, 0Boolean
DisableWebinarReactions
Disable the use of Webinar ReactionsDisabled, 0Boolean
DisableSideCar
Disable the use of Webinar Resources, which allows webinar hosts with the ability to link to external resources, such as newsletter sign-ups, learn more pages, and others.Disabled, 0Boolean

DisableBroadcastBOMessage

Disable the ability for the host to broadcast a message to all open breakout rooms. Disabled, 0Boolean
ConfirmWhenLeaveConfirm before leaving a meeting.Enabled, 1Boolean
ShowConnectedTimeEnable the Show Meeting Timers setting. This setting allows for viewing the current duration of the meeting, or the remaining time, based on scheduled duration. Disabled, 0Boolean
MuteWhenLockScreenAutomatically mute the microphone and turn off video, when the screen is locked during a meeting.Enabled, 1Boolean
EnableRemindMeetingTimeDisplay reminder notifications for upcoming meetings.Disabled, 0Boolean
DisableInMeetingZoomNotes
Disables the use of Zoom Notes during meetings. Disabled, 0Boolean
Video
zDisableRecvVideoDisable receiving video.Disabled, 0Boolean
zDisableSendVideoDisable sending video.Disabled, 0Boolean
zDisableVideoAutomatically turn off camera when joining a meeting.Disabled, 0Boolean
zUse720PByDefaultUse HD video in meetings.Disabled, 0Boolean
EnableMirrorEffectEnable mirroring of your video. Mirror effect only affects your view of your video. Enabled, 1Boolean

HideSelfView

Controls the use of the Hide Self View option. Disabled, 0Boolean
EnableFaceBeautyEnable Touch up my appearance.Disabled, 0Boolean
SetFaceBeautyValueUsed in conjunction with EnableFaceBeauty, this allows you to set the exact intensity of the Touch up my appearance filter. (Disabled), 25String
EnableLightAdaptionEnable Adjust for low-light video setting.Disabled, 0Boolean
EnableAutoLightAdaptionSet mode of adjusting low-light video feature. This is dependent on the EnableLightAdaption option.
1 - Auto
0 - Manual
Auto, 1Boolean
SetLightAdaptionManualValueUsed in conjunction with EnableLightAdaption, this allows you to set the exact intensity of the low-light adjustment. (Disabled), 20String
AlwaysShowVideoPreviewDialogAlways show the video preview when joining a meeting.Enabled, 1Boolean
zHideNoVideoUserHide non-video participants by default.Disabled, 0Boolean
EnableSpotlightSelfShow self as the active speaker when speaking.Disabled, 0Boolean
Enable49VideoSet max number of participants displayed in Gallery View to 49 participants per screen.Disabled, 0Boolean
VideoRenderMethodSet the video rendering method:
0 - Auto
1 - Direct3D11 Flip Mode
2 - Direct3D11
3 - Direct3D9
4 - GDI
Auto, 0String
Audio
DisableComputerAudioDisable and remove the Computer Audio from the meeting audio options.Disabled, 0Boolean
SetUseSystemDefaultSpeakerForVOIPUse the default system microphone.Disabled, 0Boolean
SetUseSystemDefaultMicForVOIPUse the default system speakers.Disabled, 0Boolean
AudioAutoAdjustEnable Automatically adjust microphone volume audio setting.Enabled, 1Boolean
SetSuppressBackgroundNoiseLevelSet level of background noise suppression:
0 - Auto
1- Low
2 - Medium
3 - High
Auto (0)String
EnableOriginalSoundEnable the Original sound for musicians audio profile for the meeting audio input.Disabled, 0Boolean
zAutoJoinVoipAutomatically connect audio with computer audio when joining a meeting.Disabled, 0Boolean
MuteVoipWhenJoinMute computer audio microphone when joining a meeting.Disabled, 0Boolean
EnableHIDControlEnables HID control of USB devices by the Zoom client.Enabled, 1Boolean
Screen sharing
DisableScreenShareDisable the ability to share your screen in meetings and webinars.
Note: This does not disable incoming screen sharing from other participants. 
Disabled, 0Boolean
zAutoFullScreenWhenViewShareWhen viewing shared content, the content window automatically goes fullscreen.Enabled, 1Boolean
zAutoFitWhenViewShareWhen viewing shared content, the content window automatically adjusts to fit the viewer's screen.Enabled, 1Boolean
zDisableAnnotationDisable and remove the ability to annotate over shared screen.Disabled, 0Boolean
EnableShareAudioEnable the Share computer audio option when sharing.Enabled, 1Boolean
EnableShareVideoEnable the Optimize for video clip option when sharing.Enabled, 1Boolean
DisableWhiteBoardDisable Classic Whiteboard feature.Disabled, 0Boolean
DisableInMeetingWhiteBoardDisable the Zoom Whiteboard feature in meetings and webinars.Disabled, 0Boolean
DisableSlideControlDisable Slide Control feature.Disabled, 0Boolean
DisableDesktopShareDisable the option to share your desktop when screen sharing.Disabled, 0Boolean
DisableRemoteControlDisable Remote Control feature. Disabled, 0Boolean
DisableRemoteSupportDisable Remote Support feature.Enabled, 1Boolean
zRemoteControllAllAppAllow remote control of all applications.Enabled, 1Boolean
EnableShareClipboardWhenRemoteControlAllow clipboard access during remote control.Disabled, 0Boolean
PresentInMeetingOptionSet sharing option when sharing your screen within a meeting: 
0 - Show all sharing options
1 - Automatically share desktop
Show all sharing options, 0Boolean
EnableDoNotDisturbInSharingSilence system notifications when sharing desktop.Enabled, 1Boolean
LegacyCaptureModeDisable GPU acceleration.Disabled, 0Boolean
SetScreenCaptureModeSet the screen capture mode:
0 - Auto
1 - Legacy operating systems
2 - Share with window filtering
3 - Advanced share with window filtering
4 - Advanced share without window filtering
Auto, 0String
EnableHardwareOptimizeVideoSharingUse hardware acceleration to optimize video sharing.Enabled, 1Boolean
Zoom Phone
HidePhoneInComingCallWhileInMeetingPrevent incoming call notifications while in a meeting.Disabled, 0Boolean
EnableLaunchApp4IncomingCallsControl the Launch an external app or a URL for incoming calls option in the client.
This must be used in coordination with SetCommand4IncomingCalls, so that the URL can be configured as well.
Disabled, 0Boolean
SetCommand4IncomingCallsSet the URL used when the client receives an incoming call.
This must be used in coordination with EnableLaunchApp4IncomingCalls.
Disabled, (empty)String
ClickToCallDefault

Choose which Zoom service is used when clicking a phone number to place a call. 

0 - Zoom Phone
1 - Zoom Contact Center

Zoom Phone, 0String
In-meeting Chat
zDisableChatDisable in-meeting chat.Disabled, 0Boolean
zDisableFTDisable in-meeting file transfer. (sending or receiving)Disabled, 0Boolean
DisableMeeting3rdPartyFileStorageDisable in-meeting 3rd party file transfer.Disabled, 0Boolean
Zoom Apps
DisableZoomAppsHide the Zoom Apps button.Disabled, 0Boolean

DisableZoomAppsGuestAccess

Control the ability for users to utilize a Zoom App in Guest mode.Disabled, 0Boolean
Background and Filters
DisableVirtualBkgndDisable Virtual Background feature.Disabled, 0Boolean
DisableVideoFiltersDisable Video filters feature.Disabled, 0Boolean
EnableAutoReverseVirtualBkgndRequire post-meeting virtual background auto-reversal.Disabled, 0Boolean
Recording
RecordPath, your_recording_pathSet the default recording location for local recordings./Users/User Name/Documents/ZoomString
zDisableCMRDisable recording to the cloud.Disabled, 0Boolean
zDisableLocalRecordDisable recording locally on the device.Disabled, 0Boolean
NotifyCMRAvailable
Control the desktop client setting Show notifications when a new recording is availableEnabled, 1Boolean
Zoom Room and Room System calling
DisableDirectShareDisable direct share with Zoom Rooms option.Disabled, 0Boolean
EnableStartMeetingWithRoomSystemDisplay the Call Room System button on the home screen of the desktop client.Disabled, 0Boolean
PresentToRoomWithAudioShare sound when screen sharing to a Zoom Room.Enabled, 1Boolean
PresentToRoomOptimizeVideoOptimize screen sharing for video clip when sharing to a Zoom Room.Enabled, 1Boolean
PresentToRoomOptionSet sharing option when sharing to a Zoom Room:
0 - Show all sharing options
1 - Automatically share desktop
Automatically share desktop, 1Boolean
Zoom Chat
DisableLinkPreviewInChatDisable link previews.Disabled, 0Boolean
SetMessengerDoNotDropThreadMove messages with new replies to the bottom of the chat/channel.Enabled, 1Boolean
ShowProfilePhotosInChatControls if user profile pictures are shown in Zoom Chat.Enabled, 1Boolean
ShowVoiceMessageButtonAllow use of the Send audio message option.Enabled, 1Boolean
ShowVideoMessageButtonAllow use of the Send video message option.Enabled, 1Boolean
PlaySoundForIMMessagePlay audio notifications when an IM message is received.Enabled, 1Boolean
ShowIMMessagePreviewAllow message previews in system notifications when a chat message is received.Enabled, 1Boolean
MuteIMNotificationWhenInMeetingMute chat system notifications when in a meeting.Enabled, 1Boolean
Miscellaneous
EmbedUserAgentStringEmbed a specified user agent string for all HTTP requests from Zoom client.Disabled, (empty)String
EmbedDeviceTagEmbed a specified device tag string for all HTTP requests from Zoom client application. This string will be appended to the head of the regular HTTP requests.Disabled, (empty)String
Intercloud Policies
OverrideEnforceSigninIntercloudOverride the following policies to allow users to join a Zoom meeting or webinar hosted on the Zoom for Government Cloud (ZfG Cloud) without the need to authenticate: 
  • EnforceSignInToJoin
  • EnforceAppSignInToJoin
  • EnforceSignInToJoinForWebinar
  • EnforceAppSignInToJoinForWebinar
Disabled, 0Boolean

Intercloud_DisableAllFeatures

Disables all features except for audio and video for meetings hosted on the ZfG cloud. Disabled, 0Boolean

Intercloud_DisableMeetingChat

Disables the use of in-meeting chat on meetings hosted on the ZfG Cloud.Disabled, 0Boolean

Intercloud_DisableShareScreen

Disables the local ability to share screen on meetings hosted on the ZfG Cloud.
This does not affect others' ability to shared content.
Disabled, 0Boolean

Intercloud_DisableMeetingReactions

Disables the use of meeting reactions on meetings hosted on the ZfG Cloud.Disabled, 0Boolean

Intercloud_DisableMeetingFileTransfer

Disables the use of file transfers through in-meeting chat on meetings hosted on the ZfG Cloud.Disabled, 0Boolean

Intercloud_DisableAnnotation

Disables the local ability to annotate on shared content in meetings hosted on the ZfG Cloud.
This does not affect others' ability to annotate.
Disabled, 0Boolean
Intercloud_DisableWhiteBoardDisables the use of in-meeting whiteboarding on meetings hosted on the ZfG Cloud.Disabled, 0Boolean
Intercloud_DisableLocalRecordingDisabled by default, this option disables the ability to locally record meetings hosted on the ZfG Cloud. Disabled, 0Boolean
Intercloud_DisableClosedCaptioningDisabled by default, this option disables the use of captioning features on meetings hosted on the ZfG Cloud. Disabled, 0Boolean
Intercloud_DisableRemoteControlDisabled by default, this option disables the remote control of shared screens in meetings hosted on the ZfG Cloud. Disabled, 0Boolean

Intercloud_DisableMeetingPolls

Disabled by default, this option disables the use of polling in meetings hosted on the ZfG Cloud. Disabled, 0Boolean

Intercloud_DisableComputerAudio

Disabled by default, this option disables the use of computer audio for connecting to meetings hosted on the ZfG Cloud. Disabled, 0Boolean
Zoom Mesh 
EnableMeshNetworking

Control client use of Zoom Mesh, even if deployed on your account and local network. 

Enabled, 1 Boolean

MeshMulticastIP

When utilizing Zoom Mesh, this policy allows admins to specify a valid IP address to be a UDP multicast IP for Zoom apps to declare themselves and detect each other in their local sub-network (255.255.255.0).

Admins can choose other IP addresses within the range of [224.0.0.1, 239.255.255.255].

224.0.0.1, <empty>String

MeshMulticastPort

When utilizing Zoom Mesh, this policy allows an admin to specify a valid port to be used as the UDP multicast port to communicate with other Zoom Mesh nodes on the network. Port 36699, 0String

MeshListenPortRange

When utilizing Zoom Mesh, this policy allows a valid port range to be used to set up listen sockets for connection requests between Mesh parents and children nodes. The nodes will also use this range to send signals and media data. 18801-19800, <empty>String

EnableGuestMesh

When utilizing Zoom Mesh, this allows external users (not on your account) to join a Webinar through the local Zoom Mesh-enabled network. Other requirements must be met, such as the device having the minimum supported client version for Mesh connections and the associated account setting in the web portal also enabled.Disabled, 0Boolean

Notes:

note icon

Important notes regarding AutoUpdate

The EnableSilentAutoUpdate or AlwaysCheckLatestVersion options are no longer supported. 

Managing Auto Update on versions between 5.8.6 and 5.10.1 should be done with the ZoomAutoUpdate and SetUpdatingChannel option below. This allows for automatic download and installation of updates, based on Slow and Fast release cadences, to best suit your needs. 

For versions 5.10.3 and higher, refer to the Enterprise Auto Update policies

How to deploy Zoom

An example .plist file with settings from above enabled by default can be found here.

Once the .plist file is complete, it will need to be named us.zoom.config.plist. When deploying, as long as this file is in the same folder as the ZoomInstallerIT.pkg, the installation will automatically put the .plist file into the /Library/Preferences folder.

You can also deploy IT packages through JAMF, Intune, AirWatch, or other solutions, and push the .plist through them. The Zoom client will also try to read the us.zoom.config.plist. located in the /Library/Managed Preferences folder.