You could write and admin script to set the ACL on the portion of the registry the users need to write to.