To reproduce:

I am using Crowd (2.4.0) for authentication with Confluence (4.2.2). I have an employee who left the company so I removed him from all groups in Crowd and disabled his account. His email is forwarded to another, current employee so that we don't miss any emails sent to his old address. Confluence is still sending the recommended updates email to this disabled user's email address, and so they are being forwarded to the user who is receiving his email.

Expected result:

Disabled users and/or users in no groups should not receive Confluence recommended updates emails.

Actual result:

User who is disabled and in no groups is still receiving Confluence recommended updates email on a daily basis.