diff --git a/tljh/user.py b/tljh/user.py
index a68b63c..c0ef336 100644
--- a/tljh/user.py
+++ b/tljh/user.py
@@ -37,14 +37,14 @@ def ensure_user(username):
         username
     ])
 
-    pm.hook.tljh_new_user_create(username=username)
-
     subprocess.check_call([
         'chmod',
         'o-rwx',
         expanduser('~{username}'.format(username=username))
     ])
 
+    pm.hook.tljh_new_user_create(username=username)
+
 
 def remove_user(username):
     """