Group and unrecommend disabling of update services

Group disabling of background auto-update services under same category.

Unrecommend them from "Standard" but only on "Strict". They can possibly
break auto-updates (even when application is running) which can reduce
security by leaving the user with known vulnerabilities in older
versions.

src/application/collections/windows.yaml

@@ -2571,9 +2571,15 @@ actions:
                                 docs: https://github.com/privacysexy-forks/policy-templates#disabletelemetry
                                 code: reg add HKLM\SOFTWARE\Policies\Mozilla\Firefox /v DisableTelemetry /t REG_DWORD /d 1 /f
                                 revertCode: reg add HKLM\SOFTWARE\Policies\Mozilla\Firefox /v DisableTelemetry /t REG_DWORD /d 0 /f
+            -
+                category: Disable background update check services
+                # Reduces frequent requests to third party servers
+                # Those request reveal information like machine information (such as software version and IP address) and usage behavior
+                # Once disabled, applications only check for updates and notify when they're being used
+                children:
                     -
                         name: Disable Google update service
-                recommend: standard
+                        recommend: strict
                         docs:
                             - https://websetnet.net/how-to-disable-google-chrome-automatic-updates-in-windows-10/
                             - https://www.bleepingcomputer.com/startups/GoogleUpdate.exe-25791.html #gupdate
@@ -2600,7 +2606,7 @@ actions:
                                     defaultStartupMode: Automatic # Allowed values: Automatic | Manual
                     -
                         name: Disable Adobe Acrobat update service
-                recommend: standard
+                        recommend: strict
                         call:
                             -
                                 function: DisableService
@@ -2626,25 +2632,9 @@ actions:
                                     revertCode: |-
                                         schtasks /change /tn "Adobe Acrobat Update Task" /enable
                                         schtasks /change /tn "Adobe Flash Player Updater" /enable
-            -
-                name: Disable Razer Game Scanner Service
-                recommend: standard
-                call:
-                    function: DisableService
-                    parameters:
-                        serviceName: Razer Game Scanner Service # Check: (Get-Service -Name 'Razer Game Scanner Service').StartType
-                        defaultStartupMode: Manual # Allowed values: Automatic | Manual
-            -
-                name: Disable Logitech Gaming Registry Service 
-                recommend: standard
-                call:
-                    function: DisableService
-                    parameters:
-                        serviceName: LogiRegistryService # Check: (Get-Service -Name 'LogiRegistryService').StartType
-                        defaultStartupMode: Automatic # Allowed values: Automatic | Manual
                     -
                         name: Disable Dropbox auto update service
-                recommend: standard
+                        recommend: strict
                         call:
                             -
                                 function: DisableService
@@ -2665,6 +2655,23 @@ actions:
                                     revertCode: |-
                                         schtasks /Change /ENABLE /TN "DropboxUpdateTaskMachineCore"
                                         schtasks /Change /ENABLE /TN "DropboxUpdateTaskMachineUA"
+            -
+                name: Disable Razer Game Scanner Service
+                recommend: standard
+                call:
+                    function: DisableService
+                    parameters:
+                        serviceName: Razer Game Scanner Service # Check: (Get-Service -Name 'Razer Game Scanner Service').StartType
+                        defaultStartupMode: Manual # Allowed values: Automatic | Manual
+            -
+                name: Disable Logitech Gaming Registry Service 
+                recommend: standard
+                call:
+                    function: DisableService
+                    parameters:
+                        serviceName: LogiRegistryService # Check: (Get-Service -Name 'LogiRegistryService').StartType
+                        defaultStartupMode: Automatic # Allowed values: Automatic | Manual
+
             -
                 category: Disable Media Player data collection
                 children: 
@@ -7359,44 +7366,10 @@ functions:
         call:
             function: RunPowerShell
             parameters:
-                code:  |-
-                    $capabilityName = '{{ $capabilityName }}'
-                    try {
-                        # Using wildcard for version number handling
-                        $capability = Get-WindowsCapability -Online -Name "$capabilityName*"
-                        if (!$capability) {
-                            Write-Host "Skipping. Capability `"$capabilityName`" is missing."
-                            exit 0
-                        }
-                        if ($capability.State -eq 'NotPresent') {
-                            Write-Host "Skipping. Capability `"$capabilityName`" is missing."
-                            exit 0
-                        }
-                        Write-Host "Removing capability `"$capabilityName`""
-                        Remove-WindowsCapability -Online -Name "$($capability.Name)" -ErrorAction Stop
-                        Write-Host "Successfully removed `"$CapabilityName`""
-                    }
-                    catch {
-                        Write-Error "Failed to remove `"$capabilityName`": $_"
-                    }
+                code: Get-WindowsCapability -Online -Name '{{ $capabilityName }}*' | Remove-WindowsCapability -Online
                 revertCode: |-
-                    $capabilityName = '{{ $capabilityName }}'
-                    try {
-                        # Using wildcard for version number handling
-                        $capability = Get-WindowsCapability -Online -Name "$capabilityName*"
-                        if (!$capability) {
-                            Write-Error "Failed to find `"$capabilityName`"."
-                            exit 1
-                        }
-                        $result = Add-WindowsCapability -Name $capability.Name -Online -ErrorAction Stop
-                        Write-Host "Successfully added `"$capabilityName`"."
-                        if ($result.RestartNeeded -eq 'Yes') {
-                            Write-Warning "A restart is needed to finish installing `"$capabilityName`"."
-                        }
-                    }
-                    catch {
-                        Write-Error "Failed to add  `"$capabilityName`": $_"
-                    }
+                    $capability = Get-WindowsCapability -Online -Name '{{ $capabilityName }}*'
+                    Add-WindowsCapability -Name "$capability.Name" -Online
     -
         name: RenameSystemFile
         parameters: