The service accounts need access to do the SPN registration unregistrations in AD, if it doesnt then it will have to be a manual registration unregistration.