Stop KES locally when UI is hidden and endpoint is offline

[Fatemeh]

Hello,

We have the local UI user interface hidden for users. In some cases, endpoints are offline from the Admin Server, so KES cannot be disabled remotely. We need a temporary local way to stop or disable KES for troubleshooting.

I tried:

klpsm.exe stop_avp_service
But it returns:
The call of the ControlService return code 1052: The requested control is not valid for this service.

I also tried "Disabling Protection of application services against external management”, but this allows any user with Administration Privilage to disable KES without authentication.

Is there any supported CLI or local method to stop/disable KES?