I am setting up Replication and have a question about what's considered best practice for the accounts that will be running the replication agents. Microsoft says, “Run each replication agent under a different Windows account, and use Windows Authentication for all replication agent connections.” What they don't say is whether these accounts are local accounts or domain accounts.

Which should I use/create, domain accounts or local accounts?

I've always used AD accounts on the distributor, and local service accounts on the publisher and the subscribers. I could probably make a good case for using AD accounts for every Windows Authenticated account used in a domain if for no other reason than it would serve as good documentaiton.

-PatP