You don't need the first part...just the latter. Create a group called "Forum Users", don't need to give it any permissions or anything. Then in each forum, edit Group Access to "Forum Users". When peole sign up, they won't be in that group until you manually add them. Dig?