Move new hire accounts into temp OU and notify Group IT

Your new workspace user accounts land in the root OU, causing missed onboarding steps and delayed access. IT staff get alerted and accounts move to the onboarding OU so MFA and setup finish before enforcement.