This article lists all the Permissions Needed for the Service Account:

• Check Active Directory machine account password management is enabled on the virtual disk (vDisk)
• Enable automatic password support is enabled on Server Properties in the PVS server console.
• Validate the value for Change computer account password every 7 days
• Verify the Group Policy Object (GPO) in the Organization Unit (OU) where the target device is located for the policy Disable machine account password changes to be enabled
• In Active Directory, ensure the PVS service account has permissions in Active Directory to reset password and change password for the PVS target devices Active directory Machine Accounts OUs.