Carter, wish I had've found this thread when it first started. Would've saved me a lot time.
For what it's worth........just delete the default user you used for your template and no more problems. El Capitan recreates them for the new user, and then no more permission issues.
Thanks again.