For restricting users from editing the registry or network settings I would first take a look at network policies using poledit.exe. You can set these up fairly quickly to do just what you're asking. I have also successfully used a KIX script to emulate network policies by directly updating the registry.

I can post some sample code if you would like...

Michael F.