Yep, you're right. I thought I could capture the registry while the led alert was active and find the settings PA uses, but there weren't any other than system state data and active notifications entries. Nothing there that we could use for a simple reg change solution.
