You would need to give those users admin rights or you would need to manually give those users full access to multiple file locations and registry locations that might need to be written to when a program is installed.
If this is a computers controlled by GPO you could create a special group for those users and give them local admin rights, then set a GPO that blocks accessing the Properties on LAN connections. There are a number of settings that will block editing LAN settings in gpedit > User Configuration > Administrative Templates > Network > Network Connection. You would want to apply this GPO as a USER GPO and make sure it applies only to the specific users so that other admins can modify TCP/IP settings.