LDAP Group configuration

I have the following AD config:

-city.domain.com

-Domain Users

-Company1

+Admins

+Agents

-Company2

+Admins

+Agents

I would like to segregate the employees into two groups (so they can’t talk across companies)

How would I do that?