To revoke permissions that were granted with sp_grantlogin use either:
The sp_revokelogin command when Adaptive Server is running under Integrated Security mode or under Mixed mode, and the connection is Named Pipes.
The revoke command when Adaptive Server is running under Standard mode or under Mixed mode, and the connection is other than Named Pipe.
The following command line revokes all permissions from the NT group named Administrators:
sp_revokelogin Administrators