Select the product you need help with
- Internet Explorer
- Windows Phone
- More products
HOW TO: Turn Off ASP Session State in Active Server Pages and IIS
Article ID: 244465 - View products that this article applies to.
This article was previously published under Q244465
We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 7.0 running on Microsoft Windows Server 2008. IIS 7.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:
http://www.microsoft.com/technet/security/prodtech/IIS.mspxFor more information about IIS 7.0, visit the following Microsoft Web site:
This step-by-step article describes how to improve the performance of your Web server by turning off Active Server Pages (ASP) session state.
The Web server with ASP automatically creates a Session object when a Web page from the application is requested by a user who does not already have a session. The server destroys the Session object when the session expires or is abandoned, and when session state is turned off, ASP does not track users and does not permit an ASP script to store information in the Session object or use the Session_OnStart or Session_OnEnd events. These Session objects consume valuable resources. By turning off sessions, you can improve the performance and scalability of your ASP Web application. You can turn off session state either for the whole Web site or for specific ASP pages.
NOTE: Sessionless applications do not do the following:
Note, however, that the session ID cookie is still sent and the Session_OnStart event still fires if a page with EnableSessionState=False is requested.
For additional information about how to disable session state, click the article numbers below to view the articles in the Microsoft Knowledge Base:
306996For additional information about how to disable session state on a Web site with Front Page Server Extensions installed, click the article numbers below to view the articles in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/306996/EN-US/ )HOW TO: Disable ASP Session State in ASP.NET
(http://support.microsoft.com/kb/324249/EN-US/ )FP: Database Error Messages When Session State Is Disabled
(http://support.microsoft.com/kb/324293/EN-US/ )FP: Confirmation Page Appears But No Data Is Added to Database
Article ID: 244465 - Last Review: July 7, 2008 - Revision: 4.1