I would be wary of letting DB-ignorant IT people loose with the ability to boot DB users; a little knowledge is dangerous. Doubly so if the users are self-service.
Also, I still don't understand why you need to forcibly disconnect users in the first place. Are they running the app and then going on vacation? Are they losing their network connection and having their client crash, but the socket remains in established state on the server side? Are they running multiple concurrent instances of the client app when they should only run one?