From: saandii777 on
Hello all,

We have merge replication up and running. But we have used admin rights at
subscriber/publisher/distributer because we were testing.

Publisher: SQL Server 2008
Subscriber: SQL Server Express Edition

We use pull subscription and for running merge agent at subscriber, we run a
batch file which does the sync.

Here is the syntax of batch file
REM -- Declare the variables.
SET Publisher=instancename
SET Subscriber=instancename
SET PublicationDB=dbname
SET SubscriptionDB=dbname
SET Publication=publicationname
SET InternetURL=https://machinename/virtualdirectory/replisapi.dll
SET InternetLogin=username
SET InternetPassword=passowrd

REM --Start the Merge Agent with concurrent upload and download processes.
REM -- The following command must be supplied without line breaks.
"C:\Program Files\Microsoft SQL Server\100\COM\REPLMERG.EXE" -Publication
%Publication% -Publisher %Publisher% -Subscriber %Subscriber% -Distributor
%Publisher% -PublisherDB %PublicationDB% -SubscriberDB %SubscriptionDB%
-PublisherSecurityMode 1 -OutputVerboseLevel 2 -SubscriberSecurityMode 1
-SubscriptionType 1 -DistributorSecurityMode 1 -InternetSecurityMode 0
-InternetURL %InternetURL% -InternetLogin %InternetLogin% -InternetPassword
%InternetPassword% -Validate 3 -ParallelUploadDownload 1

Note: logging into subscriber/publisher/distibuter is through windows
authentication in above batch file.



The subscriber in our case are workers from the comapny.

They would be logging into machine having subscriber db with
domainname/username id.


Questions:
1. What rights do I give to workers account at
distributor/subscriber/publisher db such that batch file runs and security
wise it is perfect whenever they want to sync.
2. We also dont want worker to access our db through management studio.


Kindly tell.

Thanks
saandii777