I suggest you add these users to Network Configuration Operators group so that they can change the TCP/IP without admin priviledge.
Use the Network Configuration Operators group
A Description of the Network Configuration Operators Group
Hope this helps
TechNet Community Support
Not directly. If user have this priviledge just after he/she logs in, then you can create scheduled task with elevated rights and SYSTEM that runs ncpa.cpl.
Microsoft is conducting an online survey to understand your opinion of the Technet Web site. If you choose to participate, the online survey will be presented to you when you leave the Technet Web site.
Would you like to participate?