While I haven’t even thought about digging around for root-cause, I have seen different behaviors across a few Windows insurances. Some pop up the UI, one still just captures the last active screen. (It’s weird, but I don’t care enough about it to even Google the config.) Hell, it might have been patched and I haven’t noticed yet.