even if you add the "Exchange Trusted Subsystem" universal security group to the "local Administrators" group on the witness server.

you will still get warning

to get rid of the warning you would need to add the server to the exchange servers security group