Mass deployment of Zoom client apps on MacsSolved

Happy to share my two cents on this.

You can configure and deploy a .plist file to deploy the Zoom client app with pre-configured settings.

Here are some of the app settings we’ve enforced on our Mac endpoints:

• Autoupdate the app (both zAutoUpdate and EnableSilentAutoUpdate keys)
• Blocked connections to SSL certificates that are not trusted.
• Enabled Google, Email, Apple logins options.
• Disabled Keep signed in option.
• Camera turned off automatically when joining a meeting.
• Automatically connecting audio with the computer audio when joining a meeting.
• Only allow joining meetings for certain accounts.

Deployment procedure:

1. Downloaded the Zoom .pkg file(IT admin version) and added to the Hexnode app inventory.
2. Installed the app on the required devices using ‘Mandatory Apps’ policy.
3. Pushed the .plist file with the required app settings using the ‘App Configurations’ policy setting.

Here’s a link to Zoom’s support pages where you can find an extensive list of settings to pre-configure the Zoom app:

https://support.zoom.us/hc/en-us/articles/115001799006-Mass-deployment-with-preconfigured-settings-for-Mac#h_01FW55Q90YKG6F41B2RP62BXN1

Evaluate your requirements and decide what works for you before deploying them to your device fleet. I guess you can also find custom scripts on the internet (or write one) which automates the whole process, including downloading the client app from the Zoom’s website, and then simply run it using Hexnode’s execute custom script action.

@griffith Brilliant! Thanks for this man! Could please share your .plist file if that’s okay. 🙂

Also, can the users change the settings on the client app once deployed from the portal?

Here you go:

<?xml version=”1.0″ encoding=”UTF-8″?>
<!DOCTYPE plist PUBLIC “-//Apple//DTD PLIST 1.0//EN” “http://www.apple.com/DTDs/PropertyList-1.0.dtd”>
<plist version=”1.0″>
<dict>

<key>zAutoUpdate</key>
<true/>
<key>EnableSilentAutoUpdate</key>
<true/>
<key>nogoogle</key>
<false/>
<key>nofacebook</key>
<true/>
<key>DisableLoginWithEmail</key>
<false/>
<key>EnableAppleLogin</key>
<true/>
<key>DisableKeepSignedInWithGoogle</key>
<true/>
<key>KeepSignedIn</key>
<false/>
<key>ZDisableVideo</key>
<true/>
<key>ZAutoJoinVoip</key>
<true/>
<key>CanOnlyJoinMeetingOfAccountID<key>
<string>xxxxxx</string>
<key>BlockUntrustedSSLCert<key>
<true/>
<key>ZAutoFullScreenWhenViewShare</key>
<true/>
<key>ZAutoFitWhenViewShare</key>
<true/>
<key>ZRemoteControlAllApp</key>
<true/>
</dict>
</plist>

About your other query, all the settings configured under the <PackageRecommend> key can be changed by the user. If the plist key for a particular setting is outside the <PackageRecommend> key, it will be enforced and the user will not be able to change it.