Add new directory users to MFA then company group

Your new directory accounts can lack enforced MFA and group membership, leaving access unmanaged. This enforces MFA and adds company membership so IT secures accounts within 24 hours.