From 82b6614b2b17d60aa0742e508169d92a8dbcf6e8 Mon Sep 17 00:00:00 2001
From: Allen Houchins <32207388+allenhouchins@users.noreply.github.com>
Date: Tue, 7 Apr 2026 15:22:54 -0500
Subject: [PATCH] Re-add Zoom patch policies (#43175)

---
 ...acs-with-fleet-maintained-apps-installed.yml | 11 +++++------
 ...ows-with-fleet-maintained-apps-installed.yml | 11 +++++------
 .../policies/patch-fleet-maintained-apps.yml    | 17 ++++++++---------
 .../policies/patch-fleet-maintained-apps.yml    | 17 ++++++++---------
 4 files changed, 26 insertions(+), 30 deletions(-)

diff --git a/it-and-security/lib/all/labels/macs-with-fleet-maintained-apps-installed.yml b/it-and-security/lib/all/labels/macs-with-fleet-maintained-apps-installed.yml
index ab4dd8aba8..b943675bf3 100644
--- a/it-and-security/lib/all/labels/macs-with-fleet-maintained-apps-installed.yml
+++ b/it-and-security/lib/all/labels/macs-with-fleet-maintained-apps-installed.yml
@@ -33,12 +33,11 @@
   query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.tinyspeck.slackmacgap';
   label_membership_type: dynamic
   platform: darwin
-# Used by macOS Zoom patch policy when enabled (see patch-fleet-maintained-apps.yml).
-# - name: Macs with Zoom installed
-#   description: macOS hosts with Zoom installed
-#   query: SELECT 1 FROM apps WHERE bundle_identifier = 'us.zoom.xos';
-#   label_membership_type: dynamic
-#   platform: darwin
+- name: Macs with Zoom installed
+  description: macOS hosts with Zoom installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'us.zoom.xos';
+  label_membership_type: dynamic
+  platform: darwin
 - name: Macs with Okta Verify installed
   description: macOS hosts with Okta Verify installed
   query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.okta.mobile';
diff --git a/it-and-security/lib/all/labels/windows-with-fleet-maintained-apps-installed.yml b/it-and-security/lib/all/labels/windows-with-fleet-maintained-apps-installed.yml
index c863f29734..14f392ff26 100644
--- a/it-and-security/lib/all/labels/windows-with-fleet-maintained-apps-installed.yml
+++ b/it-and-security/lib/all/labels/windows-with-fleet-maintained-apps-installed.yml
@@ -18,12 +18,11 @@
   query: SELECT 1 FROM programs WHERE name = 'Google Chrome' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
   label_membership_type: dynamic
   platform: windows
-# Used by Windows Zoom patch policy when enabled (see patch-fleet-maintained-apps.yml).
-# - name: x86 Windows hosts with Zoom installed
-#   description: x86 Windows hosts with Zoom installed
-#   query: SELECT 1 FROM programs WHERE name = 'Zoom Workplace (X64)' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
-#   label_membership_type: dynamic
-#   platform: windows
+- name: x86 Windows hosts with Zoom installed
+  description: x86 Windows hosts with Zoom installed
+  query: SELECT 1 FROM programs WHERE name = 'Zoom Workplace (X64)' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
+  label_membership_type: dynamic
+  platform: windows
 - name: Windows hosts with Brave Browser installed
   description: Windows hosts with Brave Browser installed
   query: SELECT 1 FROM programs WHERE name = 'Brave';
diff --git a/it-and-security/lib/macos/policies/patch-fleet-maintained-apps.yml b/it-and-security/lib/macos/policies/patch-fleet-maintained-apps.yml
index 68c3fddaae..9ba532bba6 100644
--- a/it-and-security/lib/macos/policies/patch-fleet-maintained-apps.yml
+++ b/it-and-security/lib/macos/policies/patch-fleet-maintained-apps.yml
@@ -63,15 +63,14 @@
   install_software: false
   labels_include_any:
     - Macs with Slack installed
-# Zoom patch policy disabled until Zoom FMA is present in Fleet.
-# - name: macOS - Zoom up to date
-#   description: The host may have an outdated version of Zoom, potentially risking security vulnerabilities or compatibility issues.
-#   resolution: "Download the latest version from Self-service or check for updates using Zoom's built-in update functionality. You can also delete Zoom if you are no longer using it."
-#   type: patch
-#   fleet_maintained_app_slug: zoom/darwin
-#   install_software: false
-#   labels_include_any:
-#     - Macs with Zoom installed
+- name: macOS - Zoom up to date
+  description: The host may have an outdated version of Zoom, potentially risking security vulnerabilities or compatibility issues.
+  resolution: "Download the latest version from Self-service or check for updates using Zoom's built-in update functionality. You can also delete Zoom if you are no longer using it."
+  type: patch
+  fleet_maintained_app_slug: zoom/darwin
+  install_software: false
+  labels_include_any:
+    - Macs with Zoom installed
 - name: macOS - Okta Verify up to date
   description: The host may have an outdated version of Okta Verify, potentially risking security vulnerabilities or compatibility issues.
   resolution: "Download the latest version from Self-service or check for updates using Okta Verify's built-in update functionality. You can also delete Okta Verify if you are no longer using it."
diff --git a/it-and-security/lib/windows/policies/patch-fleet-maintained-apps.yml b/it-and-security/lib/windows/policies/patch-fleet-maintained-apps.yml
index 2cd0646a85..0be91b8286 100644
--- a/it-and-security/lib/windows/policies/patch-fleet-maintained-apps.yml
+++ b/it-and-security/lib/windows/policies/patch-fleet-maintained-apps.yml
@@ -30,15 +30,14 @@
   install_software: false
   labels_include_any:
     - x86 Windows hosts with Google Chrome installed
-# Zoom patch policy disabled until Zoom FMA is present in Fleet.
-# - name: Windows - Zoom up to date
-#   description: The host may have an outdated version of Zoom, potentially risking security vulnerabilities or compatibility issues.
-#   resolution: "Download the latest version from Self-service or check for updates using Zoom's built-in update functionality. You can also uninstall Zoom if you are no longer using it."
-#   type: patch
-#   fleet_maintained_app_slug: zoom/windows
-#   install_software: false
-#   labels_include_any:
-#     - x86 Windows hosts with Zoom installed
+- name: Windows - Zoom up to date
+  description: The host may have an outdated version of Zoom, potentially risking security vulnerabilities or compatibility issues.
+  resolution: "Download the latest version from Self-service or check for updates using Zoom's built-in update functionality. You can also uninstall Zoom if you are no longer using it."
+  type: patch
+  fleet_maintained_app_slug: zoom/windows
+  install_software: false
+  labels_include_any:
+    - x86 Windows hosts with Zoom installed
 - name: Windows - Brave Browser up to date
   description: The host may have an outdated version of Brave Browser, potentially risking security vulnerabilities or compatibility issues.
   resolution: "Download the latest version from Self-service or check for updates using Brave Browser's built-in update functionality. You can also uninstall Brave Browser if you are no longer using it."