Did you try the "Deny logon locally" option?

Be carefull when you play with that option by the way.