It's hard to say. There are certainly third party management products that leverage config profiles etc. to lock down options. But it's very difficult to stop that via the command line if there are admins.
For example, I suppose you could set a launchagent to watch specific network plist files, and do something if they're changed. You would also have to think about cached preferences (cfprefsd and all). However it may prove inadvisable to interfere with the normal operation of the OS.
(Administratively speaking, messing up a network config and losing communication with all your machines would be a nightmare. :)
You may also want to consider achieving your goals by other means. If you're having issues with people changing DNS entries, you could simply schedule a script to run every day that reverts DNS.)