>I have a bunch of users complaining that after leaving an Internet application open for 15 minutes+ that they then have to logon again. I could not duplicate the problem on my own machine. Checked with the remote vendor and they said their product does not use any timeouts. I know this must have to do with "sessions" (I'm not an internet application kind of guy!) but not sure where to start looking. A client side setting? Thanks.

In what sense do they have to "logon" again ? Do they have to logon onto the site again, many sites (eg banking) have an automatic logoff if there's no activity for a certain length of time ? Have they got dial-up access with inactivity timeout enabled, so they need to reconnect to the ISP again ?