Now I'm thinking registry is probably not an option either. Assuming the user doesn't have write access to HKLM, and that the user's HKCU is either a) the wrong one or b) not there ...

Sounds like FILE is the only way to go ... I would use a quick INI file in a temp folder or maybe somewhere in ALLUSERS ?