Hi,
We are trying to develop an ASP.NET Application. A guideline being enforced is to keep the Application Stateless and so we would be disabling Session State.
We are also planning to go with Windows Auth since this is an Intranet Application and the Users would be on AD. Given this scenario - how do we time out the security session here? Would the standard approach of specifying a timeout in Web.config work for
Windows Authentication as well or is this something that needs to be set by an AD Admin as a Policy for that domain?
Go to the complete details ...