That was it. Thanks!
Any way for the UI to detect this issue in the future? Not sure if there is an internal status that the UI is getting to indicate that the registry could not be written to.
Also perhaps it could be included in the help file on the Security Model information, etc.