FSSO collector agent with less rights / restricted account

[boneyard]

im working on using the FSSO collector agent with an account that less rights then domain admin as suggested in most documentation.

this KB article has been helpful (time to update it after so many years, but it gives a good direction): https://kb.fortinet.com/k....do?externalID=FD36039

the thing which mainly fails now is the workstation check (either Remote Registry or WMI). is there someone who has this working and can share their configuration on the Windows side?