The user may have been created as a login as normal and given database permissions but then if the server login was deleted the user would be left in the database I believe.

If users were sql logins in the database and valid on the old server you need to create the sql logins on the new server and just default them to master database then run sp_change_users_login to link the server login to the database login