I have a problem where I need to disconnect users that have had their
user accounts in AD disabled or deleted, but management does not want
to use session timeouts which would solve that problem.

Does anyone know if you can write a script that would query a known
list of disabled accounts and then disconnect them if they have an
ongoing VPN connection? Thanks.