Prohibit a user from changing LAN settings using Group Policies

One way is to give a limited account to the user. But what about accounts that need other administrative privileges? Well here how you can restrict network settings for the administrative user account:

Run GPEdit.msc

Go to User Configuration> Administrative Templates > Network > Network Connections.

Here you’ll find many network restrictions.

The ones I find useful are:
Prohibit access to properties of a LAN connection
Ability to enable/disable a LAN connection
Prohibit TCP/IP advanced configuration
Prohibit access to the advanced settings item on the advanced menu
Prohibit access to the new connection wizard

None of the above seemed to be working for an administrative account. Later on I learned that for it all to work in an administrative account I had to enable this:

Enable Windows 2000 Network Connections settings for Administrators.