I’ve never seen an ECL alert message at the server level. Perhaps this is a new ND7 thing. Try taking a look at the Admin ECL in the Domino Directory to see if the ID used to sign the agent has the rights needed. To access the admin ECL, in the DD go to Actions > Edit Administration ECL. This is just a guess as to your problem and there may be something new in ND7 I don’t know about. Also, in the agent properties on the Security tab make sure you give the ID Run Restricted Operations rights.
Subject: It looks like there is no simple solution
Well, the database has multiple replicas, and there is this one agent which is supposed to run on any server. Now most of servers are still R5, and I can not just save agents with DD7.I opened the agent(read-only) in DD7 and Admin ACL for it says: Do not allow restricted operations. Well in R5 this did not exist, and now is default value. Catch 22, I can not resave the sode and change this because it is going to cease working on other servers. I am thinking about making a copy of the agent.