Windows 2012R2 Hyper-V

We are running Hyper-V, many users have access to Hyper-V for multiple reasons. is there a way:
1. I can block users to users only Hyper-V console, (logged in users should be able to open Hyper-V console and access their own VMs only?

2. Block user from changing Network setting, IP, Subnetmask, Gateway, and DNS should be grayed out, only users logged in as WinAdmin should be able to make changes to IP settings.

3. Implement password with Special character, currently GPO does not enforce users to add any symbol / Special character, I want more than password complexity,