Open an elevated powershell window and run the commands:
#Stop SCCM Service
stop-service ccmExec
#Disable Task that starts service on workstation unlock
Disable-ScheduledTask -TaskPath "Microsoft\Configuration Manager" -TaskName "Configuration Manager Passport for Work Certificate Enrollment Task"
#cancel any pending restart
shutdown -a