ntrights.exe /deny SeRestorePrivilege GroupName
While ntrights.exe is robust, it is technically a legacy tool. If you are building modern automation scripts (PowerShell), you might prefer native PowerShell cmdlets introduced in newer Windows versions or the Carbon module.