When you attempt to approve a computer, you will get an access denied message (unless WDS is also a domain controller); the deployment service does not have permissions on the Active Directory where it is attempting to create the object. Look at the following figure:
-OR-
To resolve this, grant the computer account of the WDS server rights to create computer objects in the Computers container in the Active Directory (the default location where computer objects are created). Do the following steps:
Now when you retry the approval process, everything work as expected. Look at the following figure:
