move admin group creation to the begining of the postinstall