Has probado: revoke exec on sp from user2 as user1 http://technet.microsoft.com/en-us/ biblioteca/ms187719.aspx