restrict user access to sub domain if assigned to another sub domain
the Domain Bonus module can help you solve this problem. 


  The Domain Bonus is group of modules that extend functionality of Domain Access module.


check the "Domain Bonus: Login restrict" sub module