Community archive

Ask something
Discussion Locked

Web page time-out

0 helpful
5 replies

by Member 28024101

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

IIS 4.0 and IIS 5.0

Is there a way to time-out, or logoff a user from a secured page after a certain amount of time of inactivity, or interaction?

Thank you.

5 replies

by nikki96

For IIS4...
(backup registry first!!!)

Go to the following registry location and create these entries. Then, do a
"net
stop iisadmin /y" then a "net start w3svc".

HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\ClientCacheTime and ServerCacheTime

They are both of type REG_DWORD and specify the timeout values for schannel
client side and server side respectively, in unit of milliseconds. To make
a setting of 2 hours, make it look like this:

ClientCacheTime=7200000
ServerCacheTime=7200000

(60,000 milliseconds in 1 minute)

Should work for IIS5, too.

by Member 28024101

Thanks for the response, it would do well. However I can not find the registry mentioned: ClientCacheTime and/or ServerCacheTime. I used regedit and regedt32. I used the find feature, and it can not find these key registry, unless I have to create. If so, should be direct under \SCHANNEL ?

by nikki96

From the MSKB.
Microsoft Knowledge Base Article - 247658

To modify the length of time that the SSL session information is cached, follow these steps:

1. Open Registry Editor. To do this, click Start, click Run, type regedt32, and then click OK.
2. Click to select the following key in the registry:[HKEY_LOCAL_MACHINE][System][CurrentControlSet][Control][SecurityProviders][SCHANNEL]
3. On the Edit menu, click Add Value, type ClientCacheTime in the Value Name box, select REG_DWORD for Data Type, and then click OK.
4. In the Data box, type a value in milliseconds, click Decimal, and then click OK.
5. Repeat steps 3 and 4 to add the ServerCacheTime value.
6. Exit Registry Editor.

This discussion is closed to new replies.