I have this same problem and it's with the design of the MS API.
You can connect to the machines with an account from that domain. What is happening though is you launched this application as the user who is on your laptop. When the program is sending the logoff, it's using the account on your local computer, which has no permissions to the domains you are connected to.
To workaround this issue you would need to create a connection for each domain, then launch the manager with those credentials. Then your logoff group will work.
The problem is the API was not written to use the proper credentials. Pretty much any 3rd party app would use this method as well, so you'll likely see this issue in most other apps. Unless they have written their own way to get around this.
No one other than MS can fix this problem, so you'll probably just have to live with it... until MS fixes the API or you find a better tool.
