Question

I have the following request:
I have a website with 2 areas

1) public – session is set for 10 minutes dynamically in code (during
page request processing)
2) private – session is set for one hour
dynamically in code (during page request processing)

My problem is that I have 2 environments that act differently:

1. Development environment – reacts as expected (public and private areas have the definitions that were defined by code).
2. Production environment – all areas have 15 (or 20) minutes session timeout (the timing depends on which server I define the
   environment).

Due to the description, I understand that the code itself is not necessary.

Now, the only difference between the 2 environments is that Production has SSL encryption.

What do I need to add in order to make both environments act the same?
Thanks in advance.

Answer 1

Check the setting in IIS itself. I believe the default is 20 minutes, which may explain why you are seeing what you are seeing.

• Open IIS Manager and navigate to the level you want to manage. For information about opening IIS Manager, see Open IIS Manager (IIS 7).
  For information about navigating to locations in the UI, see
  Navigation in IIS Manager (IIS 7).

• In Features View, double-click ASP.

• On the ASP page, under Services, expand Session Properties.

• In the Time-out field, enter a time-out value in the format hh:mm:ss. For example, enter 00:15:00 for 15 minutes.

• In the Actions pane, click Apply.

From:
http://technet.microsoft.com/en-us/library/cc725820(v=ws.10).aspx