I would definitely go with RealVNC again. As mentioned above it's AD integrated so it informs the user who is remoting into their desktop. We also setup a read-only group which allows some users the ability to remote into desktops with the ability to see the desktop, but not control it.