Restrict Windows 7 Local administrator to change IP address through GPO


Job Description

i am an administrator for a small company
my clients joined to an active directory domain

they have administrative right (local administrators ) in their computer, because they use visual studio and they want to deploy application that need administrative right

i want to prevent them to change their ip address
i want to give this right only to domain admin groups in my domain

what should i do?

thanx and Best Regards