At work I get to work on a lot of different applications that I didn’t write.One of the problems I’ve inherited was an application that was using forms authentication, which is kind of rare for our apps. And had a time out set in the web config. So of course I thought the time out was as simple as just changing the number in the web config. Nope.The timeout was actually being over ridden in the code. So after doing a search of the entire solution for FormsAuthentication I found the section that was overwriting the time out. It was set to 10 minutes. So unfortunately something that should have been just a simple web.config change turned out to be a code change. And idea but I found it here: http://weblogs.asp.net/owscott/archive/2006/07/15/Forms-Authentication-Timeout.aspx