diff -urpa shadow-4.8.orig/libmisc/find_new_gid.c shadow-4.8/libmisc/find_new_gid.c
--- shadow-4.8.orig/libmisc/find_new_gid.c	2019-10-13 04:52:08.000000000 +0200
+++ shadow-4.8/libmisc/find_new_gid.c	2019-12-15 23:40:29.745000000 +0100
@@ -61,8 +61,8 @@ static int get_ranges (bool sys_group, g
 		/* A requested ID is allowed to be below the autoselect range */
 		*preferred_min = (gid_t) 1;
 
-		/* Get the minimum ID range from login.defs or default to 101 */
-		*min_id = (gid_t) getdef_ulong ("SYS_GID_MIN", 101UL);
+		/* Get the minimum ID range from login.defs or default to 10 */
+		*min_id = (gid_t) getdef_ulong ("SYS_GID_MIN", 10UL);
 
 		/*
 		 * If SYS_GID_MAX is unspecified, we should assume it to be one
diff -urpa shadow-4.8.orig/libmisc/find_new_uid.c shadow-4.8/libmisc/find_new_uid.c
--- shadow-4.8.orig/libmisc/find_new_uid.c	2019-10-13 04:52:08.000000000 +0200
+++ shadow-4.8/libmisc/find_new_uid.c	2019-12-15 23:40:29.746000000 +0100
@@ -61,8 +61,8 @@ static int get_ranges (bool sys_user, ui
 		/* A requested ID is allowed to be below the autoselect range */
 		*preferred_min = (uid_t) 1;
 
-		/* Get the minimum ID range from login.defs or default to 101 */
-		*min_id = (uid_t) getdef_ulong ("SYS_UID_MIN", 101UL);
+		/* Get the minimum ID range from login.defs or default to 1 */
+		*min_id = (uid_t) getdef_ulong ("SYS_UID_MIN", 1UL);
 
 		/*
 		 * If SYS_UID_MAX is unspecified, we should assume it to be one
diff -urpa shadow-4.8.orig/src/useradd.c shadow-4.8/src/useradd.c
--- shadow-4.8.orig/src/useradd.c	2019-12-01 17:52:32.000000000 +0100
+++ shadow-4.8/src/useradd.c	2019-12-15 23:40:29.745000000 +0100
@@ -96,10 +96,10 @@ const char *Prog;
 /*
  * These defaults are used if there is no defaults file.
  */
-static gid_t def_group = 100;
+static gid_t def_group = 1000;
 static const char *def_gname = "other";
-static const char *def_home = "/home";
-static const char *def_shell = "";
+static const char *def_home = "/home/users";
+static const char *def_shell = "/sbin/nologin";
 static const char *def_template = SKEL_DIR;
 static const char *def_create_mail_spool = "no";
 
@@ -109,7 +109,7 @@ static const char *def_expire = "";
 #define	VALID(s)	(strcspn (s, ":\n") == strlen (s))
 
 static const char *user_name = "";
-static const char *user_pass = "!";
+static const char *user_pass = "!!";
 static uid_t user_id;
 static gid_t user_gid;
 static const char *user_comment = "";