In that case, you will have to provide a lot more info.
What do you mean with “users” ?
Disconnected how/when ? Anything visible in log files ?
Config of your device ?
Context in which the device is being used (network diagram may help, much easier then words and words and words …)
etc etc