What type of Account is the User that can't unmanage a node using?
If they auth through an AD group make sure they don't also have an Individual AD account set up. If they do this will take priority over the AD Group, and they could have set up the Individual account to not allow the unmanage ability.
If this isn't the issue are you seeing any errors through the web console?