Exchange 2019 Owa/ecp session timeout configuration

θΆ… ι‚“ 217 Reputation points

HI ,

May I ask why the Exchange 2019 session timeout configuration does not take effect?

Set-OrganizationConfig -ActivityBasedAuthenticationTimeoutInterval 00:15:00

πŸ‘ User's image

0 comments No comments

Sign in to comment

2 answers

  1. Dmitry Khrebin 0 Reputation points β€’ Microsoft Employee

    Now these values ​​are in  "HKLM:\SOFTWARE\Microsoft\ExchangeServer\v15\MSExchange OWA"

    0 comments No comments

    Sign in to comment
  2. Mike Hu-MSFT 4,085 Reputation points β€’ Microsoft External Staff

    Hi,ι‚“θΆ…

    Welcome to the Microsoft forum.

    Based on your description, maybe you need to set the ActivityBasedAuthenticationTimeoutEnabled or ActivityBasedAuthenticationTimeoutWithSingleSignOnEnabled parameter value to $true.When the two parameter’s value are both $false,it will not work even if you had set the ActivityBasedAuthenticationTimeoutInterval value.

    Please try to run the following command:

    Set-OrganizationConfig – ActivityBasedAuthenticationTimeoutEnabled $true.

    More information about these parameters,you can refer to Set-OrganizationConfig (ExchangePowerShell) | Microsoft Learn.

    If the value is already been set to $true ,but stll does not work,maybe you need to run:

    Set-ItemProperty "HKLM:\SYSTEM\CurrentControlSet\Services\MSExchange OWA" -Name PrivateTimeout -Value 15 -Type DWORD

    Set-ItemProperty "HKLM:\SYSTEM\CurrentControlSet\Services\MSExchange OWA" -Name PublicTimeout -Value 15 -Type DWORD

    More details refer to: Exchange admin tip: Configure timeout settings for Outlook on the Web (techgenix.com)

    And it is mentioned that β€œin January 2024, Microsoft started retiring activity-based authentication timeout for Outlook on the web” in this link : Activity-based authentication timeout for Outlook on the web in Office 365 - Microsoft Support.

    I hope this helps.Please feel free to contact me for any updates.

    1. θΆ… ι‚“ 217 Reputation points

      HI mike hu,

       All have been enabled, but it is still not effective at the moment.
      

      [PS] C:>Get-OrganizationConfig |fl activ*

      ActivityBasedAuthenticationTimeoutEnabled : True

      ActivityBasedAuthenticationTimeoutInterval : 00:05:00

      Set-ItemProperty "HKLM:\SYSTEM\CurrentControlSet\Services\MSExchange OWA" -Name PrivateTimeout -Value 05 -Type DWORD

      Set-ItemProperty "HKLM:\SYSTEM\CurrentControlSet\Services\MSExchange OWA" -Name PublicTimeout -Value 05 -Type DWORD

      πŸ‘ User's image

    2. Mike Hu-MSFT 4,085 Reputation points β€’ Microsoft External Staff

      Hi,θΆ… ι‚“

      From my personal experience, the value of PrivateTimeOut must be less than the value of PublicTimeOut configured, you can try it.

    3. θΆ… ι‚“ 217 Reputation points

      HI Mike hu,

      Currently using the following configuration:
      

      πŸ‘ User's image

      πŸ‘ User's image

    4. Mike Hu-MSFT 4,085 Reputation points β€’ Microsoft External Staff

      Hi,θΆ… ι‚“

      Just try to set the ActivityBasedAuthenticationTimeoutWithSingleSignOnEnable to $true.

      run the command :

      Set-OrganizationConfig -ActivityBasedAuthenticationTimeoutWithSingleSignOnEnabled $true

      And wait a while for it to take effect.

    5. θΆ… ι‚“ 217 Reputation points

      HI Mike Hu,

      I have configured it, but it still doesn't work.
      

      πŸ‘ User's image


    Sign in to comment
Sign in to answer

Your answer