"Non-interactive-user" is found in WSS Report. Why?
WSS Agent was installed with mcu=1 because the user needs to logon over rdp.
In the latest versions of WSSA, installing WSSA with mcu=1, the system tunnel is re-enabled (rather than off by default in latest versions of the WSS Agent).