[elithrar]

Note that you can also force the admin password for any System Preferences GUI changes with a single click. I'm not sure whether the default for non-admin accounts is this, though.

[thinkling]

For me under Mavericks, the Networks control panel always requires a click on the lock + then authentication to make DNS changes.