FIELD NOTES

Manage Zoom Client settings with Intune Policies - The best way

intunezoompolicy

Intune policies can manage third-party apps too. Zoom ships ADMX templates, so you can control client behavior without registry hacks in your Win32 packages.

What I do in practice:

  • Import the Zoom ADMX/ADML into Intune and create an Administrative Template profile.
  • Lock down auto-start, pick an update channel, and enable manual check-for-updates so users aren’t stuck on old builds.
  • Turn off Apple OAuth if you don’t use it, and disable “keep signed in” for social logins.

Test on two devices side by side—one with policy, one without—to prove the delta before broad rollout.

Prepare the templates

  1. Download the latest Zoom Policy Template .zip.
  2. Extract it and grab the ADMX + ADML files.
  3. In Intune: Devices → Configuration policies → Import ADMX → upload both files (import dependencies like Windows.admx if prompted).

Create the policy

  1. Devices → Configuration profiles → Create profile.
  2. Platform: Windows 10 or later. Profile type: Administrative template → Imported Administrative Template (preview).
  3. Select the uploaded Zoom Meetings template and configure the settings you want.
  4. Name it and assign to your pilot group.

Test it

  1. Install Zoom on two test devices.
  2. Assign the policy to only one of them.
  3. Compare behavior to confirm settings apply.

Recommended settings I use

  • Disable keep-signed-in if using Facebook or Google auth.
  • Disable auto-start after reboot (tray and full client).
  • Enable the specified update channel and the auto-update feature.
  • Enable manual "Check for Updates" and show a toast after updates.
  • Prompt users to update when exiting a meeting if an update is available.
  • Disable login via Apple OAuth.

Keep iterating after validation, and roll out in waves to production.

Good luck!

← All articles