Is it possible to define default group membership within an AD User Template?