A controlled Remote Desktop client can move the administrator's pointer arrow under certain circumstances. Only mouse movements on the client are sent to the admin system, not mouse clicks.
This can happen when both of these conditions are met:
Note: Even when the administrator is actively controlling the client, the client can still move the pointer.