update default tier zero (#1030)

packages/go/analysis/ad/ad.go

@@ -56,7 +56,6 @@ const (
 	AuthenticatedUsersSuffix                  = "-S-1-5-11"
 	EveryoneSuffix                            = "-S-1-1-0"
 	AdminSDHolderDNPrefix                     = "CN=ADMINSDHOLDER,CN=SYSTEM,"
-	DnsAdminsDNPrefix                         = "CN=DNSADMINS,"
 )
 
 func TierZeroWellKnownSIDSuffixes() []string {
@@ -99,22 +98,6 @@ func FetchWellKnownTierZeroEntities(ctx context.Context, db graph.Database, doma
 			}
 		}
 
-		// DnsAdmins
-		if err := tx.Nodes().Filterf(func() graph.Criteria {
-			return query.And(
-				query.KindIn(query.Node(), ad.Group),
-				query.StringStartsWith(query.NodeProperty(ad.DistinguishedName.String()), DnsAdminsDNPrefix),
-				query.Equals(query.NodeProperty(ad.DomainSID.String()), domainSID),
-			)
-		}).Fetch(func(cursor graph.Cursor[*graph.Node]) error {
-			for node := range cursor.Chan() {
-				nodes.Add(node)
-			}
-			return cursor.Error()
-		}); err != nil {
-			return err
-		}
-
 		// AdminSDHolder
 		if err := tx.Nodes().Filterf(func() graph.Criteria {
 			return query.And(