I manage a multi-domain Active Directory environment. I have users whose accounts reside in one domain and who needs access to resources in another domain. The problem is that I need to restrict the hours during which they can access resources in the remote domain without affecting their ability to work with resources in their own doamin. Creating multiple accounts is not an option. Any ideas?