It looks as if any 'internal' activity prevents the timeout being reached, so it is not a measure of user inactivity. Am I correct ?   - e.g take the simple session timeout demo. Add a Unitimer to the main form - it doesn't have to have an event handler that does anything. If the timer is enabled the Session timeout condition is never reached.   If I'm correct in this : what is a good way to measure user inactivity ? I would like to throw up a mask on the screen and make a user re-identify