I have a the same problem as the following article:
The SID in question is S-1-18-1 (AUTHENTICATION_AUTHORITY_ASSERTED_IDENTITY), which is new for Windows Server 2012.
My Environment:
Windows Server 2012 Native AD
Windows Server 2008 R2, Exchange Server 2010 SP2, with Symantec Mail Security 7.0
Windows 8 Client
The Mail Security console on the Exchange Server cannot launch, due to Windows 2008 R2 not being able to convert the SID S-1-18-1.
My workaround is to use Mail Security console on Windows 8 launches fine, as Windows 8 can conver the SID. But, I have not access to Quarantine, as it's local to the Exchange Server, so not good as a workaround.
Any ideas on getting the console to launch on Windows 2008 R2? or viewing remote Quarantine?
NOTE: I cannot migrate Exchange or move it onto Windows 2012, due to the requirement of Exchange Server 2010 SP3 (not out yet).