It is very possible the user was already connected when user/account was disabled, if you are using PIX/ASA you can disconnect the user via ASDM or through cli.
asa#vpn-sessiondb logoff name
you may also issue to see vpn client connections by detail, place a question mark for other options.
asa#show vpn-sessiondb ?
Regards
Jorge Rodriguez