Session timeout can also be set on a per-session basis in the application, and there are other reasons for sessions timing out.

In ASP-classic (Which I assume is what you're referring to),...