i saw this question posed yesterday on one of the boards (maybe not this exact question, but it got me thinking..). if i use NTCR to log on users to a site are they really logged on until the user closes the browser? somebody suggested to use<BR>session.abandon()<BR>to kill the current user, but this does not work. i&#039;ve noticed that if i logon i can leave my computer (with browser open) i can come back much later (over an hour) and still be logged in to the system. is there a way to fix this?