>Is it a hang over from dailup networking, the default was 20mins from memory. Worth a try, could still be in registry.

Turns out it was a timeout setting for forms authenication in the web.config

<forms name=".ASPXAUTH" loginUrl="login.aspx" protection="All"  timeout="240" path="/" >