Creating desktop package of ARD installation for end users desktop computers. Trying to minimize security risk with ARD installation. Noticed in the Registry key a setting needs to be set to “Allow” to enable CA ARD to function it seems. 

"{F23433D1-43E3-45BD-9634-643918A03C15}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\\Program Files (x86)\\CodeMeter\\Runtime\\bin\\CodeMeter.exe|Name=CodeMeterFWEx1|Edge=TRUE|" 
"{04269210-C7DF-4B7E-971B-AF96C06A2C91}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|App=C:\\Program Files (x86)\\CodeMeter\\Runtime\\bin\\CodeMeter.exe|Name=CodeMeter Runtime Server|" 
"{321A2275-54A7-43FF-8CE3-AF116022B533}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|App=C:\\Program Files (x86)\\CodeMeter\\Runtime\\bin\\CodeMeter.exe|Name=CodeMeter Runtime Server|"

Does the following Codemeter registry setting need to be set to “Allow” to enable CA ARD to function or can the Action be set to Block (Action=Block) without impact? 

ARD 2.7MS

Yes it is set to ALLOW for a reason. The encrypted application is using TCP/IP for communication with the local CodeMeter.exe. This TCP/IP communication is using Port 22350 too.  If there is no license on this local system available, the local CodeMeter.exe is communication with the CodeMeter.exe on the server side using TCP/IP and Port 22350 again. 

It "might" work set to block, but this is not a supported installation setting.

Video URL on how to open a Support Case - https://communities.ca.com/videos/5898-demo-how-to-open-a-support-case

You can download the latest version of ARD by following the directions in this document: https://support.ca.com/us/knowledge-base-articles.TEC1354547.html.   

To contact support, go to https://www.ca.com/us/services-support/ca-support/contact-support.html.