I want to setup a VMware Workstation for users to be able to start old legacy machines up in an isolated non network enviornment.

I want to ensure that only admins can change the network settings of that vm to avoid the risk of having these lagacy systems on the network.

Is this possible?