Malware Defender Settings and Learning Thread

ok I have created this thread for discussions on help with settings, and setting recommendations from the more advanced people in here.

my first question if I go to file options and right click on one of my hard drives it brings up these settings. what do they do?? if I select "Deny" in the permissions does mean that no other program can read or write to any files inside the local disk??

 

I may be wrong but that is the way I interpret it.
I have left that setting (for C drive) to allow read but ask to write.
Maybe there is a better (more secure) setting.