Zoom Mass-deploying preconfigured settings for Mac
Zoom Desktop Clients can be preconfigured for macOS by IT Admins to download preconfigured settings to activate Zoom. It is necessary to create a .plist file and install it with the IT Admins Installer for macOS in order to complete this installation.
You can enforce the settings or set them as just the defaults, so the end-user is still able to make modifications after deployment.
With Zoom Device Management, you can centrally control desktop client and mobile app settings in the Zoom web portal, through which you can enroll the desktop client and manage the settings from the Zoom web portal.
Install Zoom on Windows, Android, and iOS devices, as well as learn how to set up the program with preconfigured settings. Furthermore, Zoom is able to manage desktop applications and mobile apps centrally by using their own Device Management platform.
Contents
- 1 Prerequisites for using the IT admin installer
- 2 How to download the admin desktop client installer
- 3 Priority of settings
- 4 How to create and configure the .plist file
- 4.1 How to require and recommend default settings
- 4.2 Available configuration options
- 4.2.1 Install and update
- 4.2.2 Network
- 4.2.3 Authentication
- 4.2.4 General meeting and client options
- 4.2.5 Video
- 4.2.6 Audio
- 4.2.7 Screen sharing
- 4.2.8 Zoom Phone
- 4.2.9 In-meeting Chat
- 4.2.10 Zoom Apps
- 4.2.11 Background and Filters
- 4.2.12 Recording
- 4.2.13 Zoom Room and Room System calling
- 4.2.14 Zoom Chat
- 4.2.15 Miscellaneous
- 4.3 **Important notes regarding AutoUpdate
- 4.4 How to deploy Zoom
- 4.5 Frequently Asked Questions
- 4.6 Where are Zoom settings stored on Mac?
- 4.7 How do I change permissions on Zoom Mac?
- 4.8 Where are Zoom settings stored?
- 4.9 How do I fix the Zoom on my Mac?
- 4.10 How do I clear my Zoom cache on a Mac?
- 4.11 Related articles
- 4.12
Prerequisites for using the IT admin installer
- MacOS desktop client for IT admins
How to download the admin desktop client installer
- Visit the Zoom Download Center to get the latest version of Zoom
- After clicking on Download for IT Admin, select the Zoom Client for Meetings option and click the Download button.
Priority of settings
There are multiple places where you can set up your settings. The Zoom Admin and the IT Admin have the ability to customize some Zoom settings, but end-users can also modify some settings if they are requested to do so. This priority will prevail if two Zoom settings are in conflict:
- Through ZDM you can deploy and lock settings
- There is no setting deployed via us.zoom.config.plist under PackageRecommendation that is applicable
- For the account or group that has its Web settings locked
- According to the user selected Client setting
- Under the PackageRecommend section of us.zoom.config.plist you will find the settings that have been deployed
- In addition to the settings that are yet to be locked down
Read it also โ
Mass Deploying With Preconfigured Settings For Windows In Zoom App |
Mass Deploying With Preconfigured Settings For Android In Zoom App |
How to create and configure the .plist file
A .plist file is required when configuring Zoom Desktop on macOS. When you deploy Zoom without configuring the .plist file, the default configuration will be used.
How to require and recommend default settings
There is an option to enforce or set the settings from within the plist, or users can choose to set the settings according to their personal preferences.
- The client will install with the settings configured, but again the user has the freedom to change the settings after deployment, if the plist key is set under PackageRecommend.
- The client will install with those settings required if the PLIS key is set outside the PackageRecommend key, and at that point, the user will not be able to adjust them.
In that case, you would need to place the following file in your Plist folder: If you want Automatically enter full screen when viewing shared content to be enabled by default, but disallow Google and Facebook logins completely:
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>NoGoogle</key> <true/> <key>NoFacebook</key> <true/> <key>PackageRecommend</key> <dict> <key>zAutoFullScreenWhenViewShare</key> <true/> </dict> </dict> </plist>
Available configuration options
Plist key | Description | Default state and value | Value type |
Install and update |
|||
zAutoUpdate | EnableSilentAutoUpdate”}”>Enable updates through the client by users. When disabled, theย Check for Updatesย button is also hidden. Please seeย AutoUpdate sectionย for important details. |
Disabled, 0 | Boolean |
EnableSilentAutoUpdate | enabled, and will fail if not enabled.”}”>Allow the desktop client to silently check for updates and, if userโs version is lower than the stable version set by Zoom, install upon launching the client. This option requires theย AutoUpdateย option to be enabled. Please seeย AutoUpdate sectionย for important details. |
Enabled, 1 | Boolean |
AlwaysCheckLatestVersion | Allow the desktop client to check for updates and, if userโs version is lower than the latest version released by Zoom, prompt the user to install the update. This option requires theย AutoUpdateย option to be enabled. Please seeย AutoUpdate sectionย for important details. |
Disabled, 0 | Boolean |
SetUpdatingChannel | features and updates”}”>Control the cadence of updates applied to the desktop client (versionย 5.6.8ย or higher): Slow (0): fewer updates and better stability. Fast (1): newest features and updates. Please seeย AutoUpdate sectionย for important details. |
Slow, 0 | Boolean |
DisableDaemonInstall | Control if the desktop client can upgrade to the 64-bit version upon update, if the 32-bit version is installed on a 64-bit system. | Disabled, 0 | Boolean |
SetEnrollToken4CloudMDM, token | Enroll your device intoย Zoom Device Managementย with a token provided from the web portal. | Disabled, (empty) | String |
Network |
|||
BlockUntrustedSSLCert | Block connections to untrusted SSL certificates. | Enabled, 1 | Boolean |
DisableCertPin | Disable Certificate Pinning. | Disabled, 0 | Boolean |
ProxyPAC, your_pac_url | Set proxy server for desktop client with PAC URL. | Disabled, (empty) | String |
ProxyServer, proxy_address | Set a proxy server for desktop client as named proxy. Example: server: port |
Disabled, (empty) | String |
ProxyBypass, bypass_rule | Set proxy bypass rule for the desktop client. | Disabled, (empty) | String |
DisableAudioOverProxy | Prevent audio traffic over proxies. | Disabled, 0 | Boolean |
DisableVideoOverProxy | Prevent video traffic over proxies. | Disabled, 0 | Boolean |
DisableSharingOverProxy | screen sharing traffic over proxies”}”>Prevent screen sharing traffic over proxies. | Disabled, 0 | Boolean |
BandwidthLimitUp | Set maximum sending bandwidth for the desktop client. Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. |
Disabled, (empty) | String (all values in Kbps) |
BandwidthLimitDown | Set maximum receiving bandwidth for the desktop client. Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. |
Disabled, (empty) | String (all values in Kbps) |
IgnoreBandwidthLimits | Ignore bandwidth limit set on web settings. (Useful for exceptions to bandwidth restrictions) | Disabled, 0 | Boolean |
EnableIndependentDataPort | share: 8802 Video: 8801″}”>If enabled, the client will use the following ports for media transmission: Audio: 8803 Screen share: 8802 Video: 8801 |
Disabled, 0 | Boolean |
DisableDirectConnection2Web | Disable all direct connections to Zoom web service. | Disabled, 0 | Boolean |
Authentication |
|||
NoFacebook | login option”}”>Remove Facebook login option. | Disabled, 0 | Boolean |
NoGoogle | Google login option”}”>Remove Google login option. | Disabled, 0 | Boolean |
EnableAppleLogin | Allow access to Apple login option. | Enabled, 1 | Boolean |
NoSSO | SSO login option”}”>Remove SSO login option. | Disabled, 0 | Boolean |
DisableLoginWithEmail | Remove Email login option”}”>Remove Email login option. | Disabled, 0 | Boolean |
DisableKeepSignedInWithSSO | Require fresh SSO login upon client start. | Disabled, 0 | Boolean |
DisableKeepSignedInWithGoogle | Require fresh Google login upon client start. | Disabled, 0 | Boolean |
DisableKeepSignedInWithFacebook | Require fresh Facebook login upon client start. | Disabled, 0 | Boolean |
KeepSignedIn | Keep the user signed in to the client when relaunched. (Email login only) |
Disabled, 0 | Boolean |
zAutoSSOLogin | Defaults login to SSO. | Disabled, 0 | Boolean |
zSSOHost | Set the default SSO URL for SSO login. For example, hooli.zoom.us would be set as “ForceSSOUrl=hooli”. |
Disabled, (empty) | String |
ForceSSOURL | Set and lock the default SSO URL for SSO login. For example, hooli.zoom.us would be set as “ForceSSOUrl=hooli”. |
Disabled, (empty) | String |
EnableEmbedBrowserForSSO | Use embedded browser in the client for SSO. | Disabled, 0 | Boolean |
SetWebDomain | Sets the web domain for logging in or joining a meeting. By default, the value is https://zoom.us or https://zoom.com. |
Disabled, (empty) | String |
DisableAutoLaunchSSO | Prevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL. | Disabled, 0 | Boolean |
EnablePhoneLogin | phone authentication”}”>Enables login with phone authentication.ย (A) | Disabled, 0 | Boolean |
EnableAlipayLogin | Enables login with Alipay authentication.ย (A) | Disabled, 0 | Boolean |
EnablQQLogin | Enables login with QQ authentication.ย (A) | Disabled, 0 | Boolean |
EnableWeChatLogin | Enables login with WeChat authentication.ย (A) | Disabled, 0 | Boolean |
Account, your account ID | Restrict the client to only join meetings hosted by the specified account IDs.ย (B) | Disabled, (empty) | String |
Login_Domain | Set the email address domain that users can login with, each separated by “&”. Example: zoom.us & hooli.com |
Disabled, (empty) | String |
EnableCloudSwitch | Enable the option to switch between Zoom commercial (default) and Zoom for Gov. | Disabled, 0 | Boolean |
EnforceSignInToJoin | joining through join URL.”}”>Require users to be authenticated before joining a meeting with the desktop client.ย Authentication can take place through the the web portal, if joining through join URL. | Disabled, 0 | Boolean |
EnforceAppSignInToJoin | Require authentication on the desktop client to join any meeting on the desktop client. | Disabled, 0 | Boolean |
EnforceSignInToJoinForWebinar | Require users to be authenticated before joining a webinar with the desktop client.ย Authentication can take place through the the web portal, if joining through join URL. | Disabled, 0 | Boolean |
EnforceAppSignInToJoinForWebinar | Require authentication on the desktop client to join any webinar on the desktop client. | Disabled, 0 | Boolean |
SetDevicePolicyToken, device_token | Require internal meeting authentication.ย (C) | Disabled, (empty) | String |
General meeting and client options |
|||
zDualMonitorOn | Enable dual monitor mode. | Disabled, 0 | Boolean |
FullScreenWhenJoin | When starting or joining a meeting, the meeting window will enter full-screen. | Disabled, 0 | Boolean |
DefaultUsePortraitView | Default to Portrait Mode upon opening Zoom. | Disabled, 0 | Boolean |
DisableClosedCaptioning | Disable the use of all closed captioning. | Disabled, 0 | Boolean |
DisableManualClosedCaptioning | Disable the use of manual, user-entered captioning. | Disabled, 0 | Boolean |
DisableQnA | Disable the use ofย Q&Aย in webinars. | Disabled, 0 | Boolean |
DisableMeetingReactions | Disable the use ofย Meeting reactions. | Disabled, 0 | Boolean |
DisableNonVerbalFeedback | Disable the use ofย Non-verbal feedback. | Disabled, 0 | Boolean |
DisableWebinarReactions | Disable the use ofย Webinar Reactions. | Disabled, 0 | Boolean |
DisableBroadcastBOMessage | Disable the ability for the host to broadcast a message to all open breakout rooms. | Disabled, 0 | Boolean |
ConfirmWhenLeave | meeting”}”>Confirm before leaving a meeting. | Enabled, 1 | Boolean |
ShowConnectedTime | Display the length of time that the user has been in the current meeting. | Disabled, 0 | Boolean |
MuteWhenLockScreen | Automatically mute the microphone, when the screen is locked during a meeting. | Enabled, 1 | Boolean |
EnableRemindMeetingTime | Display reminder notifications for upcoming meetings. | Disabled, 0 | Boolean |
Video |
|||
zDisableRecvVideo | Disable receiving video. | Disabled, 0 | Boolean |
zDisableSendVideo | Disable sending video. | Disabled, 0 | Boolean |
zDisableVideo | Automatically turn off camera when joining a meeting. | Disabled, 0 | Boolean |
zUse720PByDefault | Use HD video in meetings. | Disabled, 0 | Boolean |
EnableMirrorEffect | Enable mirroring of your video. Mirror effect only affects your view of your video. | Enabled, 1 | Boolean |
EnableFaceBeauty | Enableย Touch up my appearance. | Disabled, 0 | Boolean |
EnableLightAdaption | Enableย Adjust for low-lightย video setting. | Disabled, 0 | Boolean |
EnableAutoLightAdaption | Set mode of adjusting low-light video feature. This is dependent on theย EnableLightAdaptionย option. 1 – Auto 0 – Manual |
Auto, 1 | Boolean |
AlwaysShowVideoPreviewDialog | Always show the video preview when joining a meeting. | Enabled, 1 | Boolean |
zHideNoVideoUser | Hide non-video participants by default. | Disabled, 0 | Boolean |
EnableSpotlightSelf | active speaker when speaking”}”>Show self as the active speaker when speaking. | Disabled, 0 | Boolean |
Enable49Video | Gallery View to 49 participants per screen”}”>Set max number of participants displayed in Gallery View to 49 participants per screen. | Disabled, 0 | Boolean |
VideoRenderMethod | Set the video rendering method: 0 – Auto 1 – Direct3D11 Flip Mode 2 – Direct3D11 3 – Direct3D9 4 – GDI |
Auto, 0 | String |
Audio |
|||
DisableComputerAudio | Disable and remove theย Computer Audioย from the meeting audio options. | Disabled, 0 | Boolean |
SetUseSystemDefaultSpeakerForVOIP | Use the default system microphone in Windows. | Disabled, 0 | Boolean |
SetUseSystemDefaultMicForVOIP | Use the default system speakers in Windows. | Disabled, 0 | Boolean |
AudioAutoAdjust | Enableย Automatically adjust microphone volumeย audio setting. | Enabled, 1 | Boolean |
SetSuppressBackgroundNoiseLevel | Set level of background noise suppression: 0 – Auto 1- Low 2 – Medium 3 – High |
Auto (0) | String |
zAutoJoinVoip | Automatically connect audio with computer audio when joining a meeting. | Disabled, 0 | Boolean |
MuteVoipWhenJoin | Mute computer audio microphone when joining a meeting. | Disabled, 0 | Boolean |
EnableHIDControl | Enables HID control of USB devices by the Zoom client. | Enabled, 1 | Boolean |
Screen sharing |
|||
DisableScreenShare | Disable the ability to share your screen in meetings and webinars. | Disabled, 0 | Boolean |
zAutoFullScreenWhenViewShare | When viewing shared content, the content window automatically goes fullscreen. | Enabled, 1 | Boolean |
zAutoFitWhenViewShare | When viewing shared content, the content window automatically adjusts to fit the viewer’s screen. | Enabled, 1 | Boolean |
zDisableAnnotation | Disable and remove the ability to annotate over shared screen. | Disabled, 0 | Boolean |
EnableShareAudio | Enable theย Share computer audioย option when sharing. | Enabled, 1 | Boolean |
EnableShareVideo | Enable theย Optimize for video clipย option when sharing. | Enabled, 1 | Boolean |
DisableWhiteboard | Disableย Whiteboardย feature. | Disabled, 0 | Boolean |
DisableSlideControl | Disableย Slide Controlย feature. | Disabled, 0 | Boolean |
DisableDesktopShare | Disable the option to share your desktop when screen sharing. | Disabled, 0 | Boolean |
DisableRemoteControl | Disableย Remote Controlย feature. | Disabled, 0 | Boolean |
DisableRemoteSupport | Disableย Remote Supportย feature. | Enabled, 1 | Boolean |
zRemoteControllAllApp | Allow remote control of all applications. | Enabled, 1 | Boolean |
EnableShareClipboardWhenRemoteControl | Allow clipboard access during remote control. | Disabled, 0 | Boolean |
PresentInMeetingOption | Set sharing option when sharing directly to a Zoom Room within a meeting: 0 – Show all sharing options 1 – Automatically share desktop |
Show all sharing options, 0 | Boolean |
EnableDoNotDisturbInSharing | Silence system notifications when sharing desktop. | Enabled, 1 | Boolean |
LegacyCaptureMode | Disable GPU acceleration. | Disabled, 0 | Boolean |
SetScreenCaptureMode | Set the screen capture mode: 0 – Auto 1 – Legacy operating systems 2 – Share with window filtering 3 – Advanced share with window filtering 4 – Advanced share without window filtering |
Auto, 0 | String |
EnableHardwareOptimizeVideoSharing | Use hardware acceleration to optimize video sharing. | Enabled, 1 | Boolean |
Zoom Phone |
|||
HidePhoneInComingCallWhileInMeeting | Prevent incoming call notifications while in a meeting. | Disabled, 0 | Boolean |
In-meeting Chat |
|||
zDisableChat | in-meeting chat”}”>Disable in-meeting chat. | Disabled, 0 | Boolean |
zDisableFT | file transfer (sending or receiving files)”}”>Disable in-meeting file transfer. (sending or receiving) | Disabled, 0 | Boolean |
DisableMeeting3rdPartyFileStorage | Disable in-meeting 3rd party file transfer. | Disabled, 0 | Boolean |
Zoom Apps |
|||
DisableZoomApps | Hide theย Zoom Appsย button. | Disabled, 0 | Boolean |
Background and Filters |
|||
DisableVirtualBkgnd | Disableย Virtual Backgroundย feature. | Disabled, 0 | Boolean |
DisableVideoFilters | Disableย Video filtersย feature. | Disabled, 0 | Boolean |
EnableAutoReverseVirtualBkgnd | virtual background auto-reversal.”}”>Require post-meeting virtual background auto-reversal. | Disabled, 0 | Boolean |
Recording |
|||
RecordPath, your_recording_path | Set the default recording location for local recordings. | /Users/User Name/Documents/Zoom | String |
zDisableCMR | Disable recording to the cloud. | Disabled, 0 | Boolean |
zDisableLocalRecord | Disable recording locally on the device. | Disabled, 0 | Boolean |
Zoom Room and Room System calling |
|||
DisableDirectShare | Disable direct share with Zoom Rooms option. | Disabled, 0 | Boolean |
EnableStartMeetingWithRoomSystem | Display theย Call Room Systemย button on the home screen of the desktop client. | Disabled, 0 | Boolean |
PresentToRoomWithAudio | Share sound when screen sharing to a Zoom Room. | Enabled, 1 | Boolean |
PresentToRoomOptimizeVideo | Optimize screen sharing for video clip when sharing to a Zoom Room. | Enabled, 1 | Boolean |
PresentToRoomOption | Set sharing option when sharing to a Zoom Room: 0 – Show all sharing options 1 – Automatically share desktop |
Automatically share desktop, 1 | Boolean |
Zoom Chat |
|||
DisableLinkPreviewInChat | Disable link previews. | Disabled, 0 | Boolean |
SetMessengerDoNotDropThread | Move messages with new replies to the bottom of the chat/channel. | Disabled, 0 | Boolean |
ShowProfilePhotosInChat | Controls if user profile pictures are shown in Zoom Chat. | Disabled, 0 | Boolean |
ShowVoiceMessageButton | Allow use of theย Send audio messageย option. | Enabled, 1 | Boolean |
ShowVideoMessageButton | Allow use of theย Send video messageย option. | Enabled, 1 | Boolean |
PlaySoundForIMMessage | Play audio notifications when an IM message is received. | Enabled, 1 | Boolean |
ShowIMMessagePreview | Allow message previews in system notifications when a chat message is received. | Enabled, 1 | Boolean |
MuteIMNotificationWhenInMeeting | Mute chat system notifications when in a meeting. | Enabled, 1 | Boolean |
Miscellaneous |
|||
EmbedUserAgentString | Embed a specified user agent string for all HTTP requests from Zoom client. | Disabled, (empty) | String |
EmbedDeviceTag | Embed a specified device tag string for all HTTP requests from Zoom client application. This string will be appended to the head of the regular HTTP requests. | Disabled, (empty) | String |
Notes:
- (A)
- Devices in the China region are only able to take advantage of these options.
- (B)
- If you do not have an account ID, please have an administrator or owner of the account contact Support for assistance.
- (C)
- It is required that an account admin or owner of the account contact Support to enable this feature. To have access to Device Policy Management, the owner needs to edit the role to which they have access.ย To obtain the token required for Device Policy Management, simply go to the Device Policy Management page.
**Important notes regarding AutoUpdate
On versions before 5.8.6, AutoUpdate is not a true autoupdate feature. The desktop client will not automatically keep itself up to date with the latest client version if this option is selected. Users will only be able to manually check for updates. If you wish to accomplish something closer to an auto-update, please use the EnableSilentAutoUpdate or AlwaysCheckLatestVersion options.
The AutoUpdate feature allows you to download and install updates automatically, according to your preference, based on Slow or Fast release cadences. In the SetUpdatingChannel option below, you can set the cadence of automatic updates.
Note: An MSI file containing the VDI Host Installer can use the same switches as the standard MSI file type that is used for client installations. The installer can be deployed in a similar manner to any other piece of software. MSI configurations for the VDI Client and the non-VDI Client are similar. All options, except AutoUpdate, can be configured accordingly.
How to deploy Zoom
Find a sample .plist file where all of the above settings are enabled by default here.
After the .plist file has been constructed, it needs to be named us.zoom.config.plist in order to be able to be used. The installation will automatically place the .plist file in the /Library/Preferences folder as long as the file is in the same filepath as ZoomInstallerIT.pkg. This is because the ZoomInstallerIT.pkg is located in the same directory as the .plist file.
In addition to pushing the .plist file through JAMF, Intune, AirWatch, or any other solution, you can also deploy IT packages through these solutions. In addition to the us.zoom.config.plist, Zoom also tries to read the zoom.client.plist. There is a Managed Preferences folder located in /Library/Managed Preferences in Mac OS X.
Frequently Asked Questions
Where are Zoom settings stored on Mac?
How do I change permissions on Zoom Mac?
Where are Zoom settings stored?
How do I fix the Zoom on my Mac?
- Download Zoom and make sure it’s installed.
- Connect Mac to the internet if it is not already connected.
- Make sure Zoom’s server is up and running.
- The Zoom app should be forced to close.
- Your Mac needs to be restarted.
- Permissions must be granted to Zoom.
- It is recommended that you close other apps that are using the camera or microphone on your Mac.
- The other apps that are consuming a significant amount of resources should be closed.
How do I clear my Zoom cache on a Mac?
-
- On your Mac, you need to launch the Zoom application.
- In the top right corner of the screen, you will see a Settings icon. You can also go to the menu and select Zoom > Preferences from there.
- In the main window, click on the Zoom apps in the sidebar and then click on the Clear button.