How to force timeouts in a Sharepoint intranet site when using Windows Authentication
Background: Security for my sharepoint web site depends on windows authentication. Our workstations are members of the authenticating domain; our users log in to the domain when they access their workstation. The sharepoint web server is also a member of the same domain. One reason I’m blogging this is because I hope to get any misunderstandings I have cleared up by good comments. I was not able to find any setting – either in iis, web.config, any sharepoint site setting, etc that would force a timeout when you use windows authentication. I found posts recommending that people use forms authentication if they really wanted to enforce timeouts. So, why would anybody want timeouts if they are already secured by windows authentication? I think it’s something like the distinction between security and security theater. We had had a problem where our users put up a number of Microsoft office documents, and then each time they attempted to open a doc, they got a windows authentication ...