Zoom Workplace for Intune Best Practices for IT Admins

As an IT admin, you're likely familiar with the challenges of managing a remote workforce. To ensure seamless collaboration and productivity, integrating Zoom Workplace with Microsoft Intune is a game-changer.

Zoom Workplace for Intune allows you to manage and secure your organization's Zoom licenses from within the Intune console. This integration provides a single pane of glass for IT admins to manage and monitor Zoom users, groups, and licenses.

With Zoom Workplace for Intune, you can also automate license assignments to users based on their group membership, eliminating the need for manual license management. This feature can be especially helpful for large organizations with complex user hierarchies.

Automating license assignments can save you and your team a significant amount of time, allowing you to focus on more strategic initiatives.

Consider reading: Intune Azure

You can deploy the Zoom desktop client in bulk for Windows using three different methods: MSI Installer, Active Directory administrative templates via GPO or Intune, or updating registry keys on Windows machines manually.

To deploy Zoom using Intune, you'll need to add the Zoom Desktop Client as a Windows line-of-business app to Microsoft Intune, configure the Zoom client application deployment, deploy or assign the Zoom application to Users/Devices, and then monitor and validate the Zoom deployment using Intune.

Here are the high-level steps for deploying Zoom using Intune:

Note that deployment of the Zoom Desktop Client on target Windows devices can take time, and the software will be downloaded and then installed on the device during the next Intune policy refresh sync cycle.

Bulk Client Deployment Methods can be a bit overwhelming, but don't worry, we've got you covered. There are three ways to install and configure the Zoom desktop client in bulk for Windows.

You can use the MSI Installer to deploy the Zoom client using Group Policy Objects (GPO) or System Center Configuration Manager (SCCM). This method is straightforward and efficient.

Alternatively, you can use Active Directory administrative templates via GPO or Microsoft Intune. This method allows for more granular control over the deployment process.

If you prefer a more manual approach, you can update registry keys on Windows machines directly. However, this method requires technical expertise and should be used with caution.

Here are the three methods summarized in a table:

Remember, the choice of method depends on your specific needs and technical expertise.

To deploy Zoom using Intune, you'll need to follow these steps. First, add the Zoom desktop client as a Windows line-of-business app to Microsoft Intune. You can do this by signing in to the Intune Portal and selecting Apps > All Apps > Windows Apps, then clicking +Add.

There are three ways to bulk deploy the Zoom client in an enterprise: using the MSI Installer, Active Directory administrative templates, or updating registry keys manually. However, for Intune deployment, we'll focus on the first method.

Broaden your view: Azure Power Apps

To add the Zoom application to Intune, you'll need to select Line-of-business app as the app type and upload the ZoomInstallerFull.msi file. This will populate the app details, including the name, platform, and size.

Next, configure the Zoom client application deployment by specifying the application details, such as the name, description, publisher, and app install context. You can also choose to display the Zoom application as a featured app in the company portal.

After configuring the application details, you can assign the application to devices by selecting the Required for enrolled devices option. Make sure to review the values and settings before creating the Zoom app in Intune.

Finally, monitor the Zoom deployment in the Intune admin portal to ensure the application is successfully installed on managed Windows devices. You can do this by selecting the Zoom app and viewing the Overview blade, which will show the number of users or devices that have successfully installed the app.

Take a look at this: Azure vs Intune

Monitoring the Zoom deployment in Intune admin portal is crucial to ensure successful application installations on managed Windows devices. You'll see a notification "Upload Finished" once the Zoom installer is uploaded to the Intune admin center.

The process may take a few minutes, depending on the size of the application and internet connectivity. This is normal, so be patient.

To monitor the application installation, select the Zoom app from the list of apps in the Intune admin portal. On the Overview blade, you can see how many users or devices have successfully installed the Zoom app.

The deployment of the Zoom Desktop Client on a target Windows device can take time, as the software will be downloaded and then installed during the next Intune policy refresh sync cycle.

Discover more: Onedrive Admin Portal

To manage Zoom apps in Intune, you first need to configure the Zoom app information in the Intune portal. This involves specifying details such as the app's name, description, publisher, and install context.

You can enter command-line arguments during deployment, but be aware that certain options like EnableSilentAutoUpdate are no longer supported.

To deploy Zoom with Intune, you can specify a logo for the application and choose to display it as a featured app in the company portal.

To use Zoom for Intune, you don't need to be fully in an Office 365 environment; a hybrid environment is also supported. However, Zoom for Intune does require Intune for policy enforcement, which includes app protection policies, app configuration policies, and conditional launch policies.

To configure Zoom for Intune, you'll need to create an app protection policy and assign it during deployment. You can also add an app configuration policy to specify additional settings.

Here's a summary of the prerequisites for using Zoom for Intune:

To add an app to your management system, start by signing in to the Intune Portal. Select Apps > All Apps > Windows Apps and click +Add. The Select app type page will appear, where you'll click the drop-down and select Line-of-business app.

A different take: Microsoft Phone Apps

For Windows, the line-of-business apps supported include .msi, .appx, .appxbundle, .msix, and .msixbundle. Click Select to continue to the next step.

To proceed, navigate to the App information tab and click Select app package. You'll then upload the app package file, in this case, the ZoomInstallerFull.msi file. Once uploaded, the following details will be populated: Name: Zoom(64bit), Platform: Windows, Size: 93.26 MiB, MAM Enabled: No, and Execution Context: Dual Purpose.

These details will be automatically generated by Intune from the ZoomInstallerFull.msi installer.

You might like: How to Get Onedrive into File Explorer

Ratings and Reviews are essential for App Management, as they provide valuable feedback from users. This feedback can help developers improve their apps and make informed decisions about future updates.

Users can rate apps from 1 to 5 stars, with 5 stars being the highest rating. A high rating can increase an app's visibility in the app store.

Reviews are also crucial, as they provide detailed feedback from users about their experiences with the app. Many users rely on reviews to make informed decisions about which apps to download.

Suggestion: Why Employee Feedback Is Important

Developers can use ratings and reviews to identify areas for improvement, such as fixing bugs or adding new features. By addressing these issues, developers can increase user satisfaction and improve their app's overall quality.

A 4-star rating, for example, can indicate that an app is good but needs some improvement. Developers can use this feedback to make targeted updates and improve the app's overall rating.

For your interest: How to Do Zoom Meetings

For iOS and Android devices, Zoom for Intune is a special version of the Zoom app that integrates with Microsoft's Intune Mobile Device Management (MDM) features. It enforces policies like app protection and configuration policies, and conditional launch policies.

To use Zoom for Intune, you don't need to be fully on Office 365, a hybrid environment is fine. Anyone can install it, sign in, and use it like the regular client.

Zoom for Intune is best suited for organizations using Intune for policy enforcement, but it can be used in a hybrid environment if needed. For example, a customer might use Airwatch as their main MDM, but use Intune solely for app protection policy features.

To configure Zoom for Intune, you first need to create an app protection policy, which you can do through the Intune portal. During deployment, you can assign this policy to users or groups.

You can also add an app configuration policy, which is used to set configuration settings. This is optional, but can be helpful in certain situations.

The first person to sign in to the app should be an Azure global admin, to grant admin consent for the Zoom for Intune Enterprise application. This is necessary to avoid the "needs to be enabled by admin" message.

Zoom Workplace for Intune is a powerful tool that seamlessly integrates with your existing Microsoft Intune setup.

The platform supports a wide range of devices, including Windows, iOS, and Android devices.

You can manage and secure these devices from a single dashboard, ensuring that your company's data remains protected.

For Windows devices, Zoom Workplace for Intune supports Windows 10 and later versions.

This means you can easily roll out Zoom to your Windows 10 users and manage their settings from within the Intune console.

For iOS and Android devices, Zoom Workplace for Intune supports devices running iOS 13 and later, and Android 10 and later.

This wide range of compatibility ensures that you can deploy Zoom to all your mobile workers, no matter what device they use.

Consider reading: How to Delete Onedrive on Android

The Social Sign In Issue is a common problem that can arise when setting up Zoom Workplace for Intune. This issue occurs when the initial sign in appears to succeed, but then asks for a second sign in, which shows up as "Zoom Social Login" in Entra Logs.

This second sign in attempt tries to use the default browser, which in this case is Safari on iOS, but fails due to the App Protection Policy. The policy requires the use of a managed browser, which Safari is not.

Broaden your view: Onedrive Scam Email

The user tried changing the default browser, but that did not seem to change the sign in browser. This suggests that the issue is not with the default browser setting, but rather with the way Zoom Workplace for Intune is configured.

One user reported that they hit the same problem after deploying the same configuration, indicating that this issue is not unique to their setup.

You might enjoy: Macbook Onedrive Not Syncing