hope this help
https://www-secure.symantec.com/connect/forums/report-show-services-being-started-specific-accout
see WDRAIN1 comments
Try this....
copy and paste in a Altiris report
select
vc.Name [Computer Name]
,vc.[OS Name]
,svc.Name [Service Name]
,svc.Description
,svc.StartupType
,svc.LogonAs
from vComputer vc
join Inv_AeX_AC_NT_Services svc on svc._ResourceGuid = vc.Guid
where vc.[OS Name] like '%server%'
and svc.LogonAs not in
('LocalSystem',
'NT AUTHORITY\LocalService',
'NT AUTHORITY\NetworkService',
'NT AUTHORITY\NETWORK SERVICE',
'NT AUTHORITY\LOCAL SERVICE'