If you allow PPTP in server-manager, by default all users will have access. To block access for some of them:
$ /sbin/e-smith/db accounts setprop username PPTPAccess off
Replace "username" with the name of the user you want to block.
regards,
Michiel