How about a GUI (even if it only for admins) so that registry entries NEVER have to be altered by hand.

See Response below