FortiClient - Remote Registry Question

Hi, everyone.  My company is currently testing the FortiClient deployment.  I see that having Remote Registry enabled on Windows machines is required for many functions of FortiClient.  I was able to bypass this requirement by doing the client deployment through SCCM.  However, now it appears the FC client is unable to communicate with the EMS database.  Our production environment currently has Remote Registry disabled.  We are hesitant to leave the service enabled on automatic start.

Is there a way to scope access to the Remote Registry service to only the EMS server?