If you add a policy to use the administration ECL as default for the workstation ECL be careful.
If the ID is not allowed to update the workstation ECL all users will get a ECL alert to allow to modify their workstation ECL. If you have 1000+ users the support phone keeps ringing.
Ok. I know in Lotus Notes it’s all about security.