Oops, hit the enter key accidentally... Brian,
Can you turn on Debugging and have it show all of the variables scopes? This might help you figure out where the session id is coming from. Pay particular attention to the cookie scope. Also, check your Application.cfm/cfc for ClientManagement. Is it enabled? If it is, ColdFusion will create cookies and pass in the session id as a token to the cookie, which can cause sessions to be available to IE when you reopen the browser (I've had this happen to me before). If you aren't using client variables in your application, make sure you set ClientManagement to false. HTH, Carl > I have Use J2EE Session Variables checked, as well as Enable > Application Variables and Enable Session Variables. I don't have any > code dealing with cookies at this point. Perhaps I have to manipulate > the default and maximum timeout for the Application variables in the > administrator? BTW, I am running MX 6.1. Thanks for your help. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:322536 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
