I have Openfire running fine and integrated with AD. We use security groups to break down the users into different sections in the Spark client.
I have the need to segregate a couple of groups - in other words, in Spark, they need to see the rosters for their groups, but NOT all of the other groups - make sense?