Did you know that in order to remove a user from the his/her last aux

group, you need a -G "" argument? Had to read the source code to learn
that.

tbsetup/mkacct-ctrl.in

@@ -225,6 +225,9 @@ if (TBAdmin($user)) {
 if ($grouplist) {
     $groupargument = "-G $grouplist";
 }
+else {
+    $groupargument = "-G \"\"";
+}
 
 #
 # Make user on local. We don't give them a password since they are not