Hi Kevin,
The WLAN Override feature would probably be your best bet. Have a look at this Q&A;
Q. We have a wireless network with over 500 access points (APs), and we have some VLANs that can only exist in certain buildings for security reasons. How do I restrict a service set identifier (SSID) by AP so that every SSID is not sent to every AP on the system?
A. You can use the WLAN Override feature. Complete these steps in order to configure WLAN Override:
In the WLC GUI, navigate to Wireless and choose whether you want to work with the IEEE 802.11b/g radios or the IEEE 802.11a radios.
In order to select the AP that you want to modify, click the Configure link that is next to the name of that AP.
From the WLAN Override drop-down menu, choose Enable.
Note: The WLAN Override menu is the last item on the left side of the window.
The list of all WLANs that are configured on the WLC appears.
From this list, check the WLANs that you want to appear on the AP, and click Apply.
Save your configuration after you make these changes. If you save your configuration, the changes remain when the WLC reboots.
From this good Q&A doc;
http://www.cisco.com/en/US/products/ps6366/products_qanda_item09186a008064a991.shtml
Enabling WLAN Override
The WLAN Override option allows you to enable or disable specific WLANs for individual access points.
From this doc;
http://www.cisco.com/en/US/products/ps6366/products_configuration_guide_chapter09186a008076cbfd.html#wp1114777
Hope this helps!
Rob
