disable dnsZoneEntry and privateSub for guest accounts