[otrs] New user via LDAP and Permissions

I have OTRS setup to get auth via Windows AD (LDAP). All works fine, except the user has no access to any queues because they are not in the Users group. How might I config OTRS so that when a new user is automatically created they are part of the users group? Thanks, Mark