From http://www.zdnet.com/article/researchers-say-intels-management-engine-feature-can-be-switched-off/:
“It seems some government customers can request Intel’s always-on Management Engine (ME) ‘master controller’ for its CPUs to be disabled.
That’s not an option for the general public, but researchers at Russian security firm Positive Technologies have found a way to use these government-only privileges to disable ME.”
Related: Critical Elevation of Privilege Vulnerability in Various INTEL Firmware.