Under Options --> Advanced --> Advanced settings for connections to this computer:
Change the access control to CUSTOM and make sure "Connect and view my screen" is allowed. Change "Control this computer" to denied. There are other options here that you might want to disable as well.