I've made changes in the HKCU key during logon. Seems to work. The user shouldn't even need admin rights on the box to make changes to it.