In my environment, we shut off the windows update service on all our production service. How can I create an APM template that can be applied to all windows servers where it would alert if any of the servers has the Windows Update service started?