Sorry for late response.
yes BT 2006 R2
The only thing in the security log on my biztalk servers (odd though) is
nuomerous connections (success) from other servers in our domain (user:
ANONYMOUS LOGON). Dont know why?
On my SQL servers there are MANY connections (about 100) from the Biztalk
servers (user: my own user account) when I browse the BT Console (or
enumerate the applications). We have 20 applications in BT.
Event IDs raised on SQL servers (only success) are 538, 540, 576
Is this "normal"?