A financial services company must run a legacy Windows application that requires a specific version of IIS and custom Windows patches. The company wants to minimize operational overhead but needs full control over the OS. Which Google Cloud service is most appropriate?