Tweaking Outlook Web Access timeout options

OWA also maintains two separate values for timeouts -- one for logins from trusted clients (such as an intranet or a VPN), and another for logins from public clients (such as a shared computer). Both values are set in the registry on the Exchange server that hosts OWA, and can be edited depending on your needs.

The trusted-client timeout is stored as a DWORD, calibrated in minutes, at:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchange
WEB\OWA\TrustedClientTimeout

For public clients, it's a different value in the same branch:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchange
WEB\OWA\PublicClientTimeout (also a DWORD calibrated in minutes)

The default timeout for trusted clients is 24 hours; the default timeout for public clients is 15 minutes. The PublicClientTimeout value can never be larger than the TrustedClientTimeout value.

If your company policy is exceptionally strict, you can set the public client timeout to a mere five minutes. If you're confident that only properly authenticated users will be accessing your intranet desktops, you can set the value for trusted clients as high as 43200, or 30 days.

In theory, both values can be set to 43200, but it's a bad idea to do this for public clients, since you can't always count on users to properly log out when using a public terminal.

Remember that if you make any of these changes, you'll need to restart Internet Informat...

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Outlook and Outlook Web Access Tips Block Web beacons and protect OWA users from spam Outlook 2007 shut-down problems and fixes OWA 2007 configuration tricks to boost performance Pros and cons of Outlook 2007's storage engine redesign Lock down direct file access and protect OWA users Simplify an OWA URL on Windows Server 2008 Windows Mobile 6.5 touts Internet Explorer, OWA improvements Custom error message redirects OWA users When OWA's default configurations aren't good enough Save time typing Outlook 2007 messages with Quick Parts Outlook Web Access Block Web beacons and protect OWA users from spam OWA 2007 configuration tricks to boost performance Top 5 Exchange ActiveSync tips Lock down direct file access and protect OWA users Simplify an OWA URL on Windows Server 2008 Windows Mobile 6.5 touts Internet Explorer, OWA improvements When OWA's default configurations aren't good enough Digging deeper into Exchange Server 2010 Troubleshoot 'System Attendant' error messages in OWA Troubleshoot Microsoft Outlook Web Access problems

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary

ion Services (IIS).

"Activity" is a key factor in all this, since an inactive connection is what triggers a timeout. Microsoft defines client "activity" as any interaction between the client and server, such as opening, sending, saving, switching folders, or refreshing the browser.

Typing in appointments, meeting requests, posts, contacts, or tasks is not considered activity. However, an MS Exchange Blog post about forms-based authentication -- the OWA logon security feature introduced in Exchange Server 2003 -- indicates that composing a new message or editing an existing one doesn't count towards the OWA timeout value.

About the author: Serdar Yegulalp is editor of Windows Insight, a newsletter devoted to hints, tips, tricks, news and goodies for all flavors of Windows users.

Do you have comments on this tip? Let us know.

Related information from SearchExchange.com:

Please let others know how useful this tip was via the rating scale below. Do you have a useful Exchange Server or Microsoft Outlook tip, timesaver or workaround to share? Submit it to SearchExchange.com. If we publish it, we'll send you a nifty thank-you gift.

Rate this Tip To rate tips, you must be a member of SearchExchange.com. Register now to start rating these tips. Log in if you are already a member. Submit a Tip DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.