How to deploy Zoom desktop client with Microsoft Intune

Microsoft Intune lets you push the Zoom Workplace desktop client to managed Windows devices with custom settings pre-configured — SSO domain, auto-update behavior, audio defaults, and more. Users get Zoom installed silently without needing to download anything themselves, and the client is ready to go with your organization’s SSO configuration pre-filled.

What Intune Deployment Does

Here’s what happens once you deploy Zoom through Intune:

During deployment:

1. Intune detects that the target device is in the assigned group and doesn’t have Zoom installed.
2. The Zoom MSI is downloaded to the device from Intune’s content delivery network.
3. Intune runs the MSI silently with your configured properties (SSO domain, update settings, etc.).
4. Zoom installs without any user interaction — no prompts, no UAC dialogs, no restart required.

After deployment:

• Users see Zoom in their Start menu and taskbar.
• Opening Zoom shows the SSO login page for your company (if you configured zSSOHost).
• Auto-update behavior follows your MSI configuration.
• Intune tracks install status — you can see which devices have Zoom and which don’t.
• Intune can push MSI updates when new Zoom versions are released.

Prerequisites

• Microsoft Intune (included in Microsoft 365 E3/E5 or as standalone)
• Windows 10 1903+ or Windows 11 on target devices
• Devices enrolled in Intune (Azure AD joined or hybrid Azure AD joined)
• Zoom admin access to download the IT admin MSI installer

Step 1: Download the Zoom MSI Installer

1. Go to the Zoom download center.
2. Scroll to the IT Admin section (or go directly to the IT Admin download page).
3. Download the MSI installer:
   • Choose 64-bit for modern fleets (recommended for Windows 10/11 on 64-bit hardware).
   • Choose 32-bit only if you have legacy 32-bit devices.
4. Note the version number — you’ll need this for Intune’s detection rules.

Important: Download the “Zoom Workplace” MSI, not “Zoom Meetings” (the old branding). As of 2024, Zoom has rebranded to Zoom Workplace.

Step 2: Upload the MSI to Intune

1. Sign in to the Intune admin center.
2. Go to Apps > Windows > Add.
3. Select app type: Line-of-business app.
4. Click Select.

App Package File

1. Click Select app package file.
2. Upload the Zoom MSI you downloaded.
3. Intune will parse the MSI and auto-populate some fields.

App Information

Fill in:

Step 3: Configure Install Commands

This is where you control how Zoom installs and what settings are pre-configured.

Install Command

msiexec /i "ZoomInstallerFull.msi" /quiet /norestart ZoomAutoUpdate=1 EnableSilentAutoUpdate=1 zSSOHost=yourcompany.zoom.us ZConfig="account=yourcompany"

Uninstall Command

msiexec /x "{ProductCode}" /quiet /norestart

Replace {ProductCode} with the actual product code from the MSI (Intune usually auto-detects this).

MSI Properties Reference

These properties control Zoom’s behavior after installation:

Example: Full enterprise install command with SSO and Zoom Phone:

msiexec /i "ZoomInstallerFull.msi" /quiet /norestart ZoomAutoUpdate=1 EnableSilentAutoUpdate=1 zSSOHost=yourcompany.zoom.us ZConfig="account=yourcompany" ZoomPhone=1 DisableLoginWithEmail=1 AudioAutoAdjust=1

Step 4: Configure Requirements and Detection

Requirements

Detection Rules

Intune uses detection rules to determine if Zoom is already installed:

• MSI product code (default) — Intune auto-detects this from the uploaded MSI. This is the simplest option.
• Custom detection (alternative) — check for C:\Program Files\Zoom\bin\Zoom.exe or a registry key under HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall.

Step 5: Assign to Device Groups

1. In the Assignments tab, click Add group under Required (auto-install).
2. Select your target device groups:
   • All devices — deploy Zoom to every managed device
   • Specific groups — e.g., “Sales Team Devices” or “Office Workstations”
3. Optionally add groups under Available for enrolled devices — users can install from the Company Portal app on demand.

Recommendation: Start with a pilot group (e.g., “IT Team Devices”) to verify the deployment works, then expand to the full organization.

Step 6: Review and Create

1. Review all settings on the summary page.
2. Click Create.
3. Intune begins deploying to assigned devices. Devices check in periodically (typically every 8 hours, or users can manually sync).

Monitoring Deployment

After creating the app:

1. Go to Apps > Windows > Zoom Workplace.
2. Click Device install status to see:
   • Installed — devices where Zoom was successfully deployed
   • Failed — devices where installation failed (click for error details)
   • Pending — devices that haven’t checked in yet
   • Not applicable — devices that don’t meet requirements

Managing Updates

Option 1: Let Zoom Auto-Update (Simplest)

If you set ZoomAutoUpdate=1 and EnableSilentAutoUpdate=1:

• Zoom handles all updates automatically in the background.
• No Intune work needed for ongoing updates.
• Less control over which version is deployed.

Option 2: Manage Updates via Intune (Most Control)

If you set ZoomAutoUpdate=0:

1. When a new Zoom version is released, download the new MSI from the Zoom download center.
2. In Intune, go to Apps > Zoom Workplace > Properties > App package file.
3. Upload the new MSI.
4. Intune detects the version change and pushes the update to assigned devices.

Option 3: Hybrid (Recommended for Most Orgs)

• Set ZoomAutoUpdate=1 — Zoom handles minor/patch updates silently.
• Push major version updates through Intune when you’re ready — download the new MSI and update the Intune app.
• This balances security (timely patches) with stability (controlled major updates).

Controlling Settings via Registry (GPO Alternative)

For settings you need to enforce after installation, Intune can push registry keys. Zoom reads configuration from:

HKLM\SOFTWARE\Policies\Zoom\Zoom Meetings\General

Deploy these via an Intune Configuration Profile > Settings Catalog > or a Custom OMA-URI profile.

Important: Registry keys under HKLM\SOFTWARE\Policies\Zoom take precedence over MSI properties. If you see settings “reverting,” check for conflicting registry policies.

Common Issues

• Zoom not installing on some devices — Check the Intune device install status for error codes. Common issues: device not meeting OS requirements, device hasn’t synced with Intune yet (force sync via Company Portal), or a previous Zoom installation is blocking the MSI. Uninstall the existing version first.
• SSO prompt not pre-filled — Verify the zSSOHost property in your install command. The value should be just yourcompany.zoom.us (not https://yourcompany.zoom.us). Also check that the Zoom vanity URL is properly configured in the Zoom admin portal.
• Auto-update not working after Intune deployment — Check for a DisableAutoUpdate=1 registry key at HKLM\SOFTWARE\Policies\Zoom\Zoom Meetings\General. Registry policies override MSI properties. Remove the registry key if you want auto-update to work.
• Users see Zoom update prompts — Set EnableSilentAutoUpdate=1 in the MSI properties to suppress update dialogs. If prompts still appear, check that the registry key SetUpdatingChannel isn’t overriding the MSI setting.
• Zoom installs but shows old version — If Ignore app version is set to Yes in Intune, it won’t push the updated MSI. Set it to No and upload the new MSI version.
• Conflict between Intune and Zoom’s auto-updater — If you’re managing updates via Intune (ZoomAutoUpdate=0), make sure there’s no GPO or registry key re-enabling auto-update. Both can’t manage the same setting. Pick one approach and enforce it consistently.