Take a look at BASCOM's AnyWhere Filter,
http://www.bascom.com/solutions/anywhere-filter. We've done work to
integrate with Casper Suite so you can do filtering based on Groups and
usernames. I was one of the speakers during the "Utilizing the JSS AP...