I just ran into this this morning as well. We updated an app-stack for a desktop pool recently and this users are getting kicked out before they login completely on some cases. I'd review any logs like if your using UEM the flexegnine log to see the login process, thats probably where my day is going today.