Symantec Endpoint Protection (SEP) Application and Device Control (ADC) is not able to block hardware devices, and users are able to use blocked devices when Windows is running in Safe Mode.
Application and Device Control does not function in Safe Mode because the drivers required to provide this feature are not loaded.
Application and Device Control cannot block devices in Safe Mode.