You can turn it off in the bios, but windows will still execute code with root privileges from devices with the right PCI and USB ID As far as I know, that one cannot be turned off. I assume it is also a police/intel backdoor for PCs with secure boot and encryption turned on.