Not exactly sure what you mean...are you talking about on the client?
Yes,The Client OS is Windows 7,I want use Symantec Endpoint Protection 12.1 Disable modify IP address。
Are your users part of the local admin group? If not, they cannot make this change.
Otherwise, this is best done with a GPO. See here:
https://community.spiceworks.com/topic/561949-gpo-to-allow-users-to-enable-disable-connection-and-set-ip-address