Thank you for your reply!
In our situation, the customers have to have full local administrator permission for the Guest OS, and also Public IPs.
Just wondering whether there is a way to binding (or lock) MAC address and IP address at VM virtual network or virtual switch level.