<div>
A timeout is defined as "idle". So the session is closed, when it is idle for more than 15 minutes.<br>But if the users continues to click, a new session is created. <br><br>What is your intention to do? What should happen? &nbsp;<br><br>
</div>


<div>
Bembi<br>If the user is on his computer<br>Has the web site open to any page<br>Walks away for 16 minutes<br>The site should end the session<br>And when they click... it redirects to Login.aspx
</div>


<div>
There is an older question addrfessing the same question with some links inside:<br><h2><a href="https://www.experts-exchange.com/questions/27041535/How-to-force-user-to-re-login-after-my-session-variable-expires-in-ASP-Net.html" rel="ugc">https://www.experts-exchange.com/questions/27041535/How-to-force-user-to-re-login-after-my-session-variable-expires-in-ASP-Net.html</a></h2><br><strong>&lt;system.web&gt;<br>&nbsp; &lt;authentication mode="Forms"&gt;<br>&nbsp; &nbsp; &lt;forms loginUrl="Login.aspx"<br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;timeout="15" <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;protection="none"<br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;cookieless="false" /&gt;<br>&nbsp; &lt;/authentication&gt;<br>&lt;/system.web&gt;</strong>&nbsp;
</div>


<div>
Hey Bembi<br>I have this already... &nbsp;&lt;forms name="admin" loginUrl="login.aspx" protection="All" path="/" timeout="15"/&gt;<br>What is the difference on the protection = none?
</div>


<div>
<strong>protection</strong> is the encryption of the cookie.<br>Default = all<br><br>Should not make a difference...(I mean according to the question)<br>What happens after the login, do you serve aspx files or html?<br>If you serve html, you may change the associating extensions (i.e htm, html) to aspnet_isapi.dll&nbsp;
</div>


sr. Developer

Larry Brister

<div>
Bembi<br>It is a CRM System each aspx page using vb code behind to data from MS SQL Server
</div>


<div>
<a href="https://www.experts-exchange.com/members/Dustin-Saunders.html" rel="ugc">Dustin Saunders</a>&nbsp;<br>Seems to me with your code<br>I could place that in the BootStrap.Master Page<br>And on time limit<br>Redirect to a page...<br>That kills the sessions<br>And then reloads the Login page?
</div>


<div>
@Larry Brister<br>That's the idea, you can use window.location.replace instead to bump to another route.
</div>


<div>
<div class="content wysiwyg-content fr-view">
I have an <a target="_blank" rel="ugc nofollow">ASP.NET</a> Website...vb code.<br>Uses a Bootstrap.Master Page<br><br>The web config has &nbsp; &nbsp;<br>&nbsp;&lt;sessionState mode="InProc" timeout="15" /&gt;<br>The IIS SessionState screen looks like the shot below...<br><br>And yet the user is never booted off at the 15 minute point<br><br>What else can I add?<br><br><img src="data:image/png;base64,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" class="fr-fic fr-dii"><br><br>
</div>
</div>



I have an
ASP.NET
Website...vb code.
Uses a Bootstrap.Master Page
The web config has    
 <sessionState mode="InProc" timeout="15" />
The IIS SessionState screen looks like the shot below...
And yet the user is never booted off at the 15 minute point
What else can I add?

IIS and ASP.Net Web Site Session Timeout

The successor to Active Server Pages, ASP.NET websites utilize the .NET framework to produce dynamic, data and content-driven web applications and services. ASP.NET code can be written using any .NET supported language. As of 2009, ASP.NET can also apply the Model-View-Controller (MVC) pattern to web applications

ASP.NET

The .NET Framework is not specific to any one programming language; rather, it includes a library of functions that allows developers to rapidly build applications. Several supported languages include C#, VB.NET, C++ or ASP.NET.

.NET Programming

IIS is Internet Information Services, the web server included with Windows Server operating systems. All current versions are built on a modular architecture; modules can be added or removed individually so that those required for specific functionality are installed. The full installation of IIS includes HTTP, security, content, compression, caching, logging and diagnostics.