I suppose you could set up the ACS for time-based VLANs...you can specify a "time bound alternate group" for individual authenticated users...which could then pass back the RADIUS assigned VLAN attribute and assign it differently.that said, you could...