Refresh ECL with Policy

Hi

I did make a Policy using security settings that when Default Admin ECL is changed it refresh users’ ECL as well. As far as I could read posts on the forum it is supposed to refresh users’ ECL as soon as they logon right? if yes, why isn’t it the case for several users on my domain? could it be because of the fact they are having Mac? Anybody know?