First, modify user miantenance to only allow them access to the companies they are authorized to access. This should be enough. If not, create a custom company lookup (use the User Lookup Wizard) for each user that filters on their authorized companies. Make sure you modify the lookup to NOT allow changes to the filter.