In Active Directory when you set up a user (or edit them) you get a tab called "Remote Control". On this tab you have the option of viewing that person's session and whether to interact or not. You also get the option of whether to require that person's permission. I am assuming this is for the Remote Assist feature.
Does this allow me a live view of their desktop... even without them giving permission? If so, are they even aware that you are viewing their desktop?