My current security setup. I should also mention that I use software restriction policies to restrict execution to only files located inside the program files x86 and x64 directories.