Hi RV,
On the IP Phone when you press the settings button and press **#, you will then find that you can edit tftp, ip, subnetmask, router etc. with the edit softkey.
When you set the "Local Phone Unlock Password" on the Common Phone Profile this becomes password protected. So when a user presses settings and **# they are asked for this password before anything can be edited via the phone.
Hope this helps!
Rob