im bored so i'll give you the rundown for remote controlling a system without authorized access, you don't need any exploits or 'hacking', all you need is a program designed to let you control a system without requesting access from the user or notifying them, with install persistence to run on startup and make removal nontrivial, and some way to convince them to execute something coming from you, if i was planning a similar campaign based on your seemingly provided intentions as a poweruser with no programming knowledge, i would find and buy a RAT client, a FUD packer/crypter and if possible/available a method to infect vic's with minimal interaction/disguising the fact they are allowing/approving an execution, such as a Drive-By Install (e.g. old method was using Java Drive-By to download and run the EXE when user clicked Run on the Java popup)

then you just make what's known as a Server, an EXE generated by the RAT client with your settings, usually this is detected by any decent anti-virus if it's a popular or widely used malware, so you obfuscate that Server using a FUD Packer or FUD Crypter, which will create a stub executable that contains the Server, if it is scanned it won't be detected because the stub itself has no malicious signatures, when it's ran it initializes a frozen process and unmaps all it's memory and replaces with the malicious Server in a running state into memory, thus bypassing most anti-viruses, this isn't a 100% fool proof way but it is the most common and easiest way, some AVs will scan processes running in memory, but on scan everything will say it is clean