Can you try latest version of FortiClient?
Also, is there anything special about the users that are having problems? Do they run same OS?
What is the exact error message they get when tunnel is down? And even after this error, the FortiClient still shows connected? (ie. they have to still select "Disconnect" to fix/)
More details are always helpful.