When multiple domains point to same host, user accounts can be restricted to a certain domain only, following these steps:

- change the HTTP server item's User Connection Group to @AutoHostHttp on Ip/Servers page
- add new user connection groups named as the domain FQDN ( wst0.intranet.local and wst0.intranet2.local in this example)