Revoking I don't know, but perhaps the setting "Deny log on as a service" in
Local Computer Policy->Computer Configuration->Windows Settings->Security
Settings->Local Policies->User Rights Assignment (found in the Local
Computer Policy snap-in in mmc.exe) would help?
