Just a quick straw poll... which components do you leave on via your policies and what effect do they have on your machines? There's a lot of mention about "Self Defense" in the threads but I've turned off Proactive Defense as well... generates a lot of false positives and I reckon could also be a slowdown factor as our machines feel quicker with it off.
Here's my list and why they're on \ off
File AntiVirus - enabled
Anti-Spy - enabled (Anti-Dialler on, popup blocker already in Windows so no need for it twice with Anti-Banner)
Mail Anti-Virus - disabled, we've got MessageLabs doing that on the mail feed so no need to check twice
Web Antivirus - enabled
Anti-Hacker - disabled, conflcits with Windows Firewall as mentioned in manual installation (?) so we stick with Windows Firewall GPO controlled
Anti-Spam - disabled, already with MessageLabs there
Proactive Defense - disabled, too many false positives, very twitchy and possible performance implications?
Device Control - enabled but nothing blocked, does block autorun which is good though (although that's controlled via GPO anyway)