In this article :
Objective
Prerequisites
Steps to follow
Validation and confirmation
Tips
Related topics and articles
Objective
This article explains how to configure the session expiry time for the ManageEngine ADAudit Plus web interface to enhance security by automatically logging out inactive users after a specified duration.
Prerequisites
You need access to the ADAudit Plus web console.
A user account with administrator privileges or delegated permissions to read and write Connection settings under Admin is required.
You need access to the server where ADAudit Plus is installed.
The ADAudit Plus service must be running and accessible.
Steps to follow
Log in to the ADAudit Plus web console with an administrator account.
Navigate to Admin > General Settings > Connection.
Locate the Session Expiry Time setting.
Set the desired session timeout duration (in minutes):
For example: 15 minutes, 30 minutes, or 60 minutes.
Click Save Changes.
Restart the ADAudit Plus service for the change to take effect:
Use RDP to remote into the server where ADAudit Plus is installed.
Open the Run dialog (Windows + R), type services.msc, and press Enter.
Locate the ManageEngine ADAudit Plus service.
Right-click it and select Restart.
Validation and confirmation
Log in to the ADAudit Plus web console.
Check if the session is terminated after the configured duration.
Tips
Configure the session expiry time based on your organization’s security policy (shorter timeouts improve security, while longer timeouts improve usability).
A recommended best practice is to set it to 15–30 minutes for sensitive environments and 60 minutes for administrative use cases.
Make sure all administrators are informed of the configured timeout to avoid unexpected disconnections during their sessions.
If single sign-on (SSO) is enabled, verify that the session expiry time does not conflict with the SSO or IdP session lifetime.
Related topics and articles