If any of your users must be able to change TCP/IP settings on a Windows box, just add the specific users or groups to the local group “Network Configuration Operators”.