To deny access to a user that already has access, just navigate to the Users node, find the user in the list on the right and right-click on it to remove it from the list. By default, Guest has access to any application when it is first created, though of course you can remove it from the list.

 

 

Disabled users cannot access an application regardless whether or not they have been granted access to it.