Prevent using from changing DNS settings

[strike101]

I'm not on a domain , just using local Windows 7 homegroup netowkr , But I want to prevent users from changing the DNS from the network settings , i'm using OpenDNS to block certain websites

currently the only way to do this is to switch their account into standard users and restrict the access via group policy editor

but we have some program/applications that require administrative privileges

maybe there are other ways to prevent them from changing it ? or maybe a program/software ?

Thanks

[Tripredacus]

but we have some program/applications that require administrative privileges

If you have Pro or Enterprise, you might be able to use AppLocker to enable those apps.

[net_user]

you can use opendns on the router level