When attempting to approve a device for WDS deployment (Vista), you get a very useful error message that says, "Access is Denied".

Reading additional help documenting, and incomplete beta documentation reveals, "You will need to delegate permissions to the Windows Deployment Services server’s machine object in order for the pending devices policy to successfully create computer objects in AD when devices are approved."