Thread:Project:Support desk/Create Account Process Issues/reply

$wgEmailConfirmToEdit = true; should make it like the person is blocked unless their email is confirmed. Its separate from the $wgGroupPermissions route, and the auto-confirmed group. To trigger the autoconfirmed group to pay attention to email, you have to modify $wgAutopromote.

It might help to figure out the issue if you posted your LocalSettings.php (remove any passwords, $wgSecretKey)