Exch2016 + ECP error in "eDiscovery and In-Place Hold" user not found, where to dig?

Question

Active Directory

We switched from EXCH2010 to EXCH2016, everything seemed to be transferred normally, arbitration service mailboxes were also recreated normally on the new server, mail goes, everything seems to be normal, but we noticed an error in the ECP in the section "electronic data discovery and in-place storage"
When switching to this the section falls out the notification

also at the moment of being in any section of the ECP in the log of the ekscha with a frequency of several seconds errors are thrown

Detailed error in the log

Local-ECP-Unknown
21912 w3wp#MSExchangeECPAppPool
30
00:00:00
Просмотреть весь лес: 'True', Контроллер домена конфигурации: "********", Предпочтительный глобальный каталог: "********", Предпочтительные контроллеры домена: "{ ******** }"
Microsoft.Exchange.Data.DataSourceOperationException: Пользователь Active Directory не найден. ---> Microsoft.Exchange.Data.Storage.ObjectNotFoundException: Пользователь Active Directory не найден. в Microsoft.Exchange.Data.Storage.ExchangePrincipalFactory.<>c__DisplayClass10.b__f() в Microsoft.Exchange.Data.Storage.ExchangePrincipalFactory.FromUserSid(ADSessionSettings adSettings, SecurityIdentifier userSid, RemotingOptions remotingOptions) в Microsoft.Exchange.Data.Storage.Management.EwsStoreDataProvider.<>c__DisplayClassb.b__a() --- Конец трассировки внутреннего стека исключений --- в Microsoft.Exchange.Data.Storage.Management.EwsStoreDataProvider.<>c__DisplayClassb.b__a() в Microsoft.Exchange.Data.Storage.LazilyInitialized`1.get_Value() в Microsoft.Exchange.Data.Storage.Management.EwsStoreDataProvider.get_CacheKey() в Microsoft.Exchange.Data.Storage.Management.EwsStoreDataProvider.ExpireCache() в Microsoft.Exchange.Data.Storage.Management.TenantStoreDataProvider.ExpireCache() в Microsoft.Exchange.Data.Storage.Management.EwsStoreDataProvider.InvokeServiceCall[T](Func`1 callback) в Microsoft.Exchange.Data.Storage.Management.EwsStoreDataProvider.GetOrCreateFolderCore(String folderName, FolderId parentFolder, Func`1 creator) в Microsoft.Exchange.Data.Storage.Management.AsyncOperationNotificationDataProvider.GetDefaultFolder() в Microsoft.Exchange.Data.Storage.Management.EwsStoreDataProvider.get_DefaultFolder() в Microsoft.Exchange.Data.Storage.Management.EwsStoreDataProvider.<>c__DisplayClass22`1.b__1a() в Microsoft.Exchange.Data.Storage.Management.EwsStoreDataProvider.InvokeServiceCall[T](Func`1 callback) в Microsoft.Exchange.Data.Storage.Management.EwsStoreDataProvider.d__28`1.MoveNext() в Microsoft.Exchange.Data.Storage.Management.AsyncOperationNotificationDataProvider.d__4.MoveNext() в Microsoft.Exchange.Configuration.Tasks.GetTaskBase`1.WriteResult[T](IEnumerable`1 dataObjects) в Microsoft.Exchange.Management.StoreTasks.GetNotification.InternalProcessRecord() в Microsoft.Exchange.Configuration.Tasks.Task.b__c() в Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)
ServerOperation
Microsoft.Exchange.Data.Storage.ObjectNotFoundException: Пользователь Active Directory не найден. в Microsoft.Exchange.Data.Storage.ExchangePrincipalFactory.<>c__DisplayClass10.b__f() в Microsoft.Exchange.Data.Storage.ExchangePrincipalFactory.FromUserSid(ADSessionSettings adSettings, SecurityIdentifier userSid, RemotingOptions remotingOptions) в Microsoft.Exchange.Data.Storage.Management.EwsStoreDataProvider.<>c__DisplayClassb.b__a()
ExFA5BEC
False
0 objects execution has been proxied to remote server.
0
ActivityId: e1fcf2ec-42ed-4826-adbb-f73820dcbc41
ServicePlan:;IsAdmin:True;
ru-RU

At the same time, all service mailboxes work fine.

The user from which I log in is the administrator of the domain, and is included in the "Discovery Management" security group
.
Need help.