[jim-greer]

This is a serious problem, but they do have a workaround. You put new users in an "exception group" that doesn't require two factor auth. Then after they set them up you take them out of the group. It's better than nothing:

http://support.google.com/a/bin/answer.py?hl=en&answer=2...