LsaRemoveAccountRights

[DllImport("Advapi32.dll", SetLastError = true)][return: MarshalAs(UnmanagedType.U4)]
public static extern uint LsaRemoveAccountRights(
   IntPtr PolicyHandle,
   IntPtr AccountSid,
   bool AllRights,
   LSA_UNICODE_STRING[] UserRights,
   uint CountOfRights
);

Microsoft documentation: Link