Implement Change Management Similar to AGPM
All configuration changes through the management console should be recorded in a change management format. This could be implemented similar to AGPM. Be able to see a changelog, view differencing, revert changes etc.
Secondary to that would be an approval workflow, also similar to AGPM where technical staff can be granted access to stage changes but an administrator will have to review and approve changes before allowing them into production.
This may also include a check in/check out system etc.