Deny Access – NT 4.0

Is there a way to prevent one member of local Administrators group to logon locally?

This right must not be removed from the group itself and this user must be in Administrators group.

Any help would be appreciated.