EndPointSecurity policies not working when booting in safe mode and the user can access all devices, i.e., When booting normally, the policy applies correctly, and the user can not access devices, though when booting in safe mode, the user can access all devices.
EndPointSecurity 2013 build 20130306 / 20130408
The issue is a known issue, and future releases resolve the issue.
The issue discussed previously is fixed in EndPointSecurity 2013 SR1 (build 20130719). You are suggested to upgrade to EndPointSecurity 2013 SR1 (build 20130719) to resolve the error.