We have a site being setup on IIS 6 (or 7 if im really lucky) and was told not to use sessions too much as the server had limited application memory (32bit Server 2Gig of ram for IIS). My understanding (based on unix/linux apache hosting and lighttpd) was that session data etc was stored in actual files.
Is it memory or filestorage?