1) you'll have a node and subnode that looks like this, change the timeout value. The other items are to do with the microsoft member role provider, but as the key cookie is the dotnetnuke one so it's ok to only change it.

<authentication mode="Forms">
   <forms name=".DOTNETNUKE" protection="All" timeout="60" />
  </authentication>

2) theres no real standard. Some organisations ban persistent cookies altogether, some allow them for short periods such as a few hours.

Cathal

when you use the remember me option for logging into the dnn portal. next time you come to the portal what file/ line gets executed to check if the users should be remembered and log them in?

i need to add to this logic and have been tossing break points like no tomorrow but am unable to catch the part of the code that does the logging in from the persistent cookie.

any help?