If you take a look at the /etc/passwd file (as root), you'll see lines something like this for each user:

Just change the shell from /bin/bash to something non-existent (like /bin/nologin) for users that you wish to prevent logging in like so:

Obviously /bin/login doesn't exist, so they can't log in as they have no valid shell.