Deny access to this computer from the network
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
Determines which users are prevented from accessing a computer over the network. This policy setting supercedes the Access this computer from the network policy setting if a user account is subject to both policies.
This user right is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers.
By default, only the LocalSystem account has the privilege to be used by processes to generate security audits.