Search Filters not working to limit users to an AD group

Installed 4.0.2, integrated with AD, but groupSearchFilter and searchFilter are not working, as I'm seeing all groups and all users

baseDN is root of AD

have group in "Users" container called "MessagingUsers" with 86 members

in console, I see ALL groups and ALL users from my entire AD - approximately 900 items.

Here is the text from my openfire.xml file pertaining to searching AD:

<groupSearchFilter><![CDATA[(&(objectClass=group)(CN=MessagingUser,CN=Users,DC=x xxxxxxxxxxx,DC=xxxxx)(member=))]]></groupSearchFilter>

<searchFilter><![CDATA[(&(objectClass=organizationalPerson)(memberOf=CN=Messagin gUser,CN=Users,DC=xxxxxxxxxxxx,DC=xxxxx)(sAMAccountName=))]]></searchFilter>

baseDN is "DC=xxxxxxxxxxxx,DC=xxxxx"  (redacted)

Everything else seems to be working fine.  What am I missing?

To clarify, I'm trying to limit users to an AD group called "MessagingUser", but my settings are not limiting anything.  All users and all groups are showing in the Users/Groups window, and test users that are not in the MessagingUser group are still able to log in.  I need to ensure that only members of that group can log in.

I could really use some help here!

Thanks