In my test I test this settings (options named by me):
Default (security mid-high, usage facility easy)
Optimal (security high, usage facility mid)
Disable:
- Allow all software from program Files Folder
- Allow Microsoft windows 8 Start Screen processes. (optional)
Strong (security very high, usage facility low)
Disable:
- Allow all software from program Files Folder
- Allow Microsoft windows 8 Start Screen processes. (optional)
Enable (optional):
- Block process signed with invalid or revoked certificate.
change this option "Do you want to allow signed process?", from "allow processes signed only by trusted vendors" to NO
Insane (or MAD) (insane security, usage now you hate this program)
Disable:
- Allow all software from program Files Folder
- Allow microsoft Windows system protected process
- Allow Microsoft windows 8 Start Screen processes.
Enable (optional):
- Block process signed with invalid or revoked certificate.
change this option "Do you want to allow signed process?", from "allow processes signed only by trusted vendors" to NO.
Don't use insane, Optimal it's the best option in my opinion.