If installed on a client site, how do I prevent them

If installed on a client site, how do I prevent them from changing the settings? Is it controlled by an administrator only? Thanks, -rst