How can the shell login access for a user be restricted or denied?

Can someone provide details on the steps and configuration changes required to prevent a user from accessing the shell. This security measure is commonly implemented to enhance system security and limit user access to specific functionalities. Thank you.