Hi all
I managed to fix it. Confusingly, although the error message was on the publisher/distributor, the folder it was referring to was on the subscriber. I gave the distribution agent account write access to the folder and disabled on-access scanning for the folder (as I had done at the publisher/distributor), and lo-and-behold it works!
Live and learn.
Duncan