This is set at the Administrator/Administrator Group Permissions under Global Settings. You may wish to review this:
The screen shot below is configured to require logged on user to approve a "Remote Control" session. If your not logged in or Screen is locked, then no requirement for confirmation.
Later releases also provides for "Session Popup" configuration.