# Configuring Concurrent Sessions for IIS

Unrestricted concurrent sessions in IIS can cause resource exhaustion, which may lead to a Denial-of-Service (DoS) condition. This happens when a single user—whether a person, software process, or device—consumes excessive server resources. As a result, other users or services may be unable to access the system.

Configure Session Limits in IIS

1. Open the Internet Information Service (IIS) Manager.

2. In the Connections pane, select your site.

3. In the Actions pane, click Advanced Settings.

4. Under Behavior, expand Limits.

5. Locate Maximum Concurrent Connections and enter the desired limit.

6. Click OK to apply the changes.

7. Restart Internet Information Services using the ToolsNet Service Manager.