Deny Logon Locally affects both runas, RDP to console and psexec. Whereas it doesnt affect the other two..

If you want to deny the other two also, you need to do it through GPO like deny logon as a service etc..