I cannot get a snapshot to generate and the log reader to operate without granting full control of the repldata folder to the user group Everyone, which seems like the most insecure setting possible.
I am creating a WPF application to set up SQL Server Replication using RMO and SMO. My arrangement is Publisher and Distributor on one computer, Subscriber on another with Push Transactional Replication. I am using windows authenticated users as the snapshot and log_reader agents. They are given db_owner of each replicated database, and db_owner and replmonitor on the distribution database. They each have the sysadmin server role.
If I grant the snapshot and log_reader windows users and the sqlserveragent user full control of the repldata folder, the replication still fails. The error is simple, OS Error 5: Access is Denied.
Is there a more restricted user group I can grant full control to, or am I forgetting a user to grant full control to?