Is there anyway other than stopping the service to bypass Cisco CSA so you can install an application?
Not that I know,
Make sure u stop it using VNC not via TS
If it's managed, you can create rules to allow app installs. If not, not that I know of.