It's in the IIS setttings.
Choose your website, right click to view Properties, then click the Home Directory tab. Click the Configuration Button and then click the Options tab. You can see the session timeout in there and set it accordingly.
Paul Leigh