At 20:40 03.05.00 -0400, you wrote:
My dilemma is this: I don't know how to restrict access only to the domain of the user. Currently a user can navigate all around the server. They can't necessarily change anything but they can see things.
Get the IP-Address of these Customers and install Firewall rules on your Server.