I have this web application that servers over 300 employees which uses Windows Authentication. The session is set on web.config as:
<authentication mode="Windows"/>
<sessionState timeout="60"/>
While the session should expire in 60 minutes. Some users are being asked for their Windows Login credentials randomly. Some even less than 10 minutes.
Based on a tip from a friend, I increased the Idle time of the Application Pool process to 60 min also.
Still, some users are being asked for their Windows Login again.
Is there anything I should do on IIS? or is it ASP.NET related? or Windows Authentication related?
MORE: I have developed other applications with similar code. But they are serving less than 50 people. This one is serving over 300. Those applications are working fine and users never been asked to provide their passwords again. Only this huge application is doing that.
Thanks a lot.