We sometimes create an extra user to use for others to protect our own user security and privacy, while the new Windows default standard user can basically meet this control, but the user is not authorized to modify the IP property if the change of the working environment is required. This has affected users in a range of users, Microsoft has made a separate user group to modify IP properties, simply through the Control Panel-> management tools-> Computer Management-> Local Users and groups to find new users, right-click Properties-> subordinate to-> Click Add to find the network Configuration operators this group and add it to the user. This allows the user to modify the properties of the network (in special cases if not, you can modify the user group to power users).
Restricting access to files by users in the user group can be done outside of Third-party tools by using Windows ' own features to log in as an administrator and access the folder you want to restrict right-click-> share-> not shared-> Users who have stopped sharing will not be able to access files that are not shared by these settings. (This feature is available in Windows Vista and Windows 7, XP is different, don't repeat here)