It will be better if the FOE setup program include a script that will be set on the local policy carying the Active/Passive switch automatically based on the server role and stats once the server will shutdown or reboot.
this can be done manualy but this can bu useful if there is many FOE installation on separate AD domains, so no need to setup a group policy on the domain either a local policy on each server.
Thanks