Demote and update group membership for Azure Domain Controllers

CHG0078463 Demote and update group membership for Azure Domain Controllers