Thanks for your replies.  We will look into changing the AT service account.

One follow up question - is there any way to disable AT altogether?