tarzan,
Funny, cuz I just posted about this... if SMSAdmin is not given at least Modify permissions to the "sources" share, stuff doesn't work, including downloading updates. I've seen in other places that people have added Authenticated Users with Full Control, but that's not necessary and is overkill. Least privilege is to just add SMSAdmin to the share permissions and you should be fine.