You just ask the target to install teamviewer or anydesk…
These are probably support staffers working from personal computers at home using some sort of remote desktop software, hard to enforce any security policies.
This is one of the places where ChromeOS is an interesting option. If the employee literally can't install software, it's very hard to get owned by malware.