The 'Deny access to this computer from the network' user right should be assigned to the appropriate accounts.
[list_of_users_followed_by_comma]
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Deny access to this computer from the network
oval:org.secpod.oval:def:8768
SCAP Repo OVAL Definition
2013-01-21