you cannot prevent them from changing the IP address inside the Guest OS if they have sufficient access at the OS level.
You might be able to use SpoofGuard to ensure it's got the correct one. http://www.vmware.com/files/pdf/techpaper/vShield-Tech-Foundations-WP.pdf
I'm pretty sure there are other threads on this forum about the same thing.