You need to move the restricted Account to their own Business Unit, and then also the users that support them to their own business unit, and then change security for Read permissions from "global" to "Business Unit" for all records that
need those restrictions.
You might also want to look at what CRM 2015 is bringing to security hierarchy. That might be useful for you as well, and comes out in a month or two.
The postings on this site are solely my own and do not represent or constitute Hitachi Solutions' positions, views, strategies or opinions.