Well you know how it is…1% of a program is telling the computer what to do, and 99% is patch jobs telling it what not to. I find the easiest system to maintain is one with no users on it. They are such whiners.
My feeling is that the sessions aren’t timing out sooner than you have defined; The session timeout should be whatever your global.asa file says it is. If you’ve set it for 40 minutes, that means I can sit here for 40 minutes while typing this message and not run into any submit problems. Any more than that, and it’s bye bye session. The link I sent you is a script that bounces traffic between the server and and idle web browser at an interval you define, which resets the session timer. This means you could set the global session timeout to be much, much less while laggards like me can spend eternity figuring out what to type.