Question

I have an web application programmed in classic asp/vb. It is running on windows server 2008 r2. iis7

I want the user of the application once logged in not be logged out automatically..ever!

is this possible if so how?

Answer 1

Yes, there are 2 ways and none are secure:

1.

• Save Login Credentials in either a cookie or in memory.
• On page load you need to force the browser to refresh every 1 hour.
• During web browser refresh send stored credentials to
  login class/function. This will refresh the session timeout.

2.

• You can also extend the session timeout using a browser refresh without storing credentials.