tcp/ip setting

I want to know – how to disable users in the LAN from configuring tcp/ip settings statically from their workstations?

like if any user logs in the local workstation he/she should not be able to go to tcp/ip properties to change the IP address of the computer.