Profiles with access to Organization Settings

Just tested changing a users profile to a reduced access profile but they still seem to be able to access and edit the Organization Settings. I cant seem to see an option to deny this type of access. Am I missing something?

Thanks,

John