Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Session timeout in IIS and web.config, which overwrites which?

2 views
Skip to first unread message

antony...@yahoo.com

unread,
Apr 23, 2008, 11:32:49 AM4/23/08
to
By default, IIS is configured to timeout a session in 20 minutes,
which can be changed through the IIS config window.

I use InProc sessionState mode. I can also set the session timeout in
web.config. So here is my question:

If IIS setting has a session timeout value of 20 minutes, but my
web.config setting has a session timeout of 30 minutes, will the
session time out in 20 minutes or in 30 minutes?

Thank you.

bruce barker

unread,
Apr 23, 2008, 12:02:20 PM4/23/08
to
the IIS session setting is for asp only, not asp.net

-- bruce (sqlwork.com)

antony...@yahoo.com

unread,
Apr 23, 2008, 12:14:31 PM4/23/08
to
On Apr 23, 12:02 pm, bruce barker

<brucebar...@discussions.microsoft.com> wrote:
> the IIS session setting is for asp only, not asp.net
>
> -- bruce (sqlwork.com)
>
> "antonyliu2...@yahoo.com" wrote:
> > By default, IIS is configured to timeout a session in 20 minutes,
> > which can be changed through the IIS config window.
>
> > I use InProc sessionState mode. I can also set the session timeout in
> > web.config. So here is my question:
>
> > If IIS setting has a session timeout value of 20 minutes, but my
> > web.config setting has a session timeout of 30 minutes, will the
> > session time out in 20 minutes or in 30 minutes?
>
> > Thank you.

Ha, thank you very much. No wonder, from my series of tests, my
timeout setting in web.config always outlives the IIS session setting.
I searched for MSDN documentation about what you said, but could not
find it.

antony...@yahoo.com

unread,
Apr 23, 2008, 12:26:50 PM4/23/08
to
On Apr 23, 12:02 pm, bruce barker
<brucebar...@discussions.microsoft.com> wrote:
> the IIS session setting is for asp only, not asp.net
>
> -- bruce (sqlwork.com)
>
> "antonyliu2...@yahoo.com" wrote:
> > By default, IIS is configured to timeout a session in 20 minutes,
> > which can be changed through the IIS config window.
>
> > I use InProc sessionState mode. I can also set the session timeout in
> > web.config. So here is my question:
>
> > If IIS setting has a session timeout value of 20 minutes, but my
> > web.config setting has a session timeout of 30 minutes, will the
> > session time out in 20 minutes or in 30 minutes?
>
> > Thank you.

I looked into the asp.net configuration setting console, and notice
that we can also set the session timeout there. So, if I have session
timeout value of 20 minutes in this asp.net configuration setting
console, but in my web.config, I set this value to be 30 minutes.
Which one will take effect?

Juan T. Llibre

unread,
Apr 23, 2008, 2:12:56 PM4/23/08
to
re:
!> If IIS setting has a session timeout value of 20 minutes, but my
!> web.config setting has a session timeout of 30 minutes, will the
!> session time out in 20 minutes or in 30 minutes?

30 minutes.

ASP.NET configuration settings override IIS configuration settings.


Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
======================================
<antony...@yahoo.com> wrote in message news:a1f90110-79cb-460b...@s50g2000hsb.googlegroups.com...

Juan T. Llibre

unread,
Apr 23, 2008, 2:14:32 PM4/23/08
to
re:
!> I looked into the asp.net configuration setting console, and notice
!> that we can also set the session timeout there. So, if I have session
!> timeout value of 20 minutes in this asp.net configuration setting
!> console, but in my web.config, I set this value to be 30 minutes.
!> Which one will take effect?

The ASP.NET configuration tool will update your web.config to whatever value you set.

Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
======================================

<antony...@yahoo.com> wrote in message news:8467759d-205e-4f61...@f36g2000hsa.googlegroups.com...

antony...@yahoo.com

unread,
Apr 23, 2008, 4:47:47 PM4/23/08
to
On Apr 23, 2:14 pm, "Juan T. Llibre" <nomailrepl...@nowhere.com>
wrote:

> re:
> !> I looked into the asp.net configuration setting console, and notice
> !> that we can also set the session timeout there. So, if I have session
> !> timeout value of 20 minutes in this asp.net configuration setting
> !> console, but in my web.config, I set this value to be 30 minutes.
> !> Which one will take effect?
>
> The ASP.NET configuration tool will update your web.config to whatever value you set.
>
> Juan T. Llibre, asp.net MVP
> asp.net faq :http://asp.net.do/faq/
> foros de asp.net, en español :http://asp.net.do/foros/
> ======================================

Muchas gracious, senor. But I am confused by two responses of
yours. :-)

Your first response says:

ASP.NET configuration settings override IIS configuration settings.

You meant web.config setting will override whatever setting we make
through IIS config console, right?

And here is your second response, shown below:

The ASP.NET configuration tool will update your web.config to whatever
value you set.

Do you mean that my web.config's session timeout value will be changed
by the IIS config tool to whatever value we set through the IIS config
tool?

Please clarify.

Juan T. Llibre

unread,
Apr 23, 2008, 4:55:47 PM4/23/08
to
re:
!> You meant web.config setting will override whatever setting we make
!> through IIS config console, right?

Not all settings, but settings which only apply to ASP.NET.

Other IIS settings ( like for PHP apps or HTML pages ),
retain the IIS default configuration, unless mapped to the ASP.NET ISAPI dll.

re:
!> Do you mean that my web.config's session timeout value will be changed
!> by the IIS config tool to whatever value we set through the IIS config tool?

No. I said just the opposite.

For ASP.NET apps, settings which apply only to ASP.NET
will override IIS default configuration settings.

Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
======================================

<antony...@yahoo.com> wrote in message news:c0df7f2c-c6e4-42a0...@b1g2000hsg.googlegroups.com...

antony...@yahoo.com

unread,
Apr 23, 2008, 5:39:10 PM4/23/08
to
On Apr 23, 4:55 pm, "Juan T. Llibre" <nomailrepl...@nowhere.com>
wrote:
> re:

> !> You meant web.config setting will override whatever setting we make
> !> through IIS config console, right?
>
> Not all settings, but settings which only apply to ASP.NET.
>
> Other IIS settings ( like for PHP apps or HTML pages ),
> retain the IIS default configuration, unless mapped to the ASP.NET ISAPI dll.
>
> re:
> !> Do you mean that my web.config's session timeout value will be changed
> !> by the IIS config tool to whatever value we set through the IIS config tool?
>
> No. I said just the opposite.
>
> For ASP.NET apps, settings which apply only to ASP.NET
> will override IIS default configuration settings.
>
> Juan T. Llibre, asp.net MVP
> asp.net faq :http://asp.net.do/faq/
> foros de asp.net, en español :http://asp.net.do/foros/
> ======================================

OK, good know. So, with regard to session timeout, web.config will
override the session timeout setting of the IIS config tool, right?

Juan T. Llibre

unread,
Apr 23, 2008, 5:55:24 PM4/23/08
to
re:
!>OK, good know. So, with regard to session timeout, web.config will
!>override the session timeout setting of the IIS config tool, right?

Only for ASP.NET apps... :-)


Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
======================================

<antony...@yahoo.com> wrote in message news:2538f8ff-6f6e-4ebb...@x41g2000hsb.googlegroups.com...

0 new messages