ntrights ( http://www.microsoft.com/downloads/details.aspx?FamilyID=9D467A69-57FF-4AE7-96EE-B18C4790CFFD&displaylang=en) - вот и подредактировать SeDenyInteractiveLogonRight - Deny log on locally

Примерно:
ntrights -r SeDenyInteractiveLogonRigh -u UserName