Not sure if this still works but feel free to test:
If you set a new users primary group appropriately ahead of time, this might work for you.