You need to show the Active Directory administrator all of the permissions assigned to Exchange Trusted Subsystem