?
Solved

IIS/OWA Auto Log Off after Idle Time?

Posted on 2005-02-24
1
Medium Priority
?
1,000 Views
Last Modified: 2008-02-01
Hello,
I have exchange 2000 installed on a W2K server with all the latest fixes installed. I have OWA running over ssl through a PIX 515. I was curious if it would be possible to auto log off a user after a certain amount of idle time? Or possiblely have an allowed logon and disallowed logon times for IIS? I currently have the connection timeout set to 450 seconds and in the apps options tab I have the session timeout to 10 mins. When I go to the web log I can see that someone has left the browser open and I see this in the log.

24.x.x.x - - [24/Feb/2005:00:02:28 -0600] "POLL /exchange/jdoe/Inbox HTTP/1.1" 401 7984
24.x.x.x - USI\jdoe [24/Feb/2005:00:02:29 -0600] "POLL /exchange/jdoe/Inbox HTTP/1.1" 207 495
24.x.x.x - - [24/Feb/2005:00:04:28 -0600] "POLL /exchange/jdoe/Inbox HTTP/1.1" 401 7984
24.x.x.x - USI\jdoe [24/Feb/2005:00:04:29 -0600] "POLL /exchange/jdoe/Inbox HTTP/1.1" 207 495
24.x.x.x - - [24/Feb/2005:00:06:28 -0600] "POLL /exchange/jdoe/Inbox HTTP/1.1" 401 7984
24.x.x.x - USI\jdoe [24/Feb/2005:00:06:29 -0600] "POLL /exchange/jdoe/Inbox HTTP/1.1" 207 495
24.x.x.x - - [24/Feb/2005:00:08:28 -0600] "POLL /exchange/jdoe/Inbox HTTP/1.1" 401 7984
24.x.x.x - USI\jdoe [24/Feb/2005:00:08:29 -0600] "POLL /exchange/jdoe/Inbox HTTP/1.1" 207 495
24.x.x.x - - [24/Feb/2005:00:10:28 -0600] "POLL /exchange/jdoe/Inbox HTTP/1.1" 401 7984
24.x.x.x - USI\jdoe [24/Feb/2005:00:10:29 -0600] "POLL /exchange/jdoe/Inbox HTTP/1.1" 207 495
24.x.x.x - - [24/Feb/2005:00:12:28 -0600] "POLL /exchange/jdoe/Inbox HTTP/1.1" 401 798

I have asked this user to please do not leave the browser open and they still let this happen. Is there something I can configure to not allow this to happen on my end. SSL timeout or OWA Timeout etc.. I have gone to AD and set that employees log in restriction time but I would hate to have to do that for everyone. I'm not even sure that will help. I'm going to try it tonight. I have tried disabling HTTP Keep-alives but OWA does not work when I do this. Any links or info would be helpful.
Thank you
0
Comment
Question by:quell23
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 104

Accepted Solution

by:
Sembee earned 150 total points
ID: 13397452
Can't be done with Exchange 2000 as there is no cookie control.

Microsoft have corrected this with Exchange 2003 by creating a new feature called Forms Based Authentication. This uses a cookie to control the timeout.

Simon.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This video discusses moving either the default database or any database to a new volume.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question