Added in Version 23.2
If Lock on Disconnect is enabled,

• Switching from a non-Backstage logon session will lock that machine.
• The host disconnecting will lock that machine.

If Lock on Connect is enabled,

• Switching to a non-Backstage logon session will lock that machine.
• The host connecting will lock that machine.

ConnectWise Control 2023.2 Release notes - ConnectWise

Unfortunately, not all applications will work in backstage, and Control panel is one of them. So I have to decline this one as it is not technically feasible.

Chris, 

This would be pretty easy to set up as long as you are using a Custom Property to identify the organization. Company is CustomProperty1 (by default) 

I'd just create a session group where CustomProperty1='MyCompanyHere' and set up the user roles to require consent on the session group (reminder that Permissions are additive. If you have a machine in multiple groups, that machine will have all of the permissions of every group it belongs to)

Create a new user role - ConnectWise
If you have any issues with getting this set up, please contact our support team for assistance.

Support Services | Partners | ConnectWise

Hi there, please reach out to our support team for assistance with this issue:
Contact Support (site.com)

Control uses CIDR to restrict or allow access to pages like the Host Page or Admin page.  You should be able to generate the CIDR for specific countries and enter them in the Advanced Configuration Editor
Advanced Configuration Editor - ConnectWise

Support for headless machines is outlined in this article:
Connect to a headless Windows machine - ConnectWise

Generally if there is a video card output we will be able to capture the screen, in some cases where video is outputting a dummy plug may be needed.

The Guest Connected will be displayed when a user is logged into the guest machine, in your screenshot, it looks like the guest is not connected. (View general session information - ConnectWise)

The other situation where this would not populate would be if backstage is set as the default when a host connects to the machine. 

If you continue to encounter this issue, please contact our support team for assistance.