I want to configure a policy that requires the end user to grant permission for an admin to establish a remote access session unless the device is unattended (no-one logged-in). Is this possible?