The AD/Windows collector has a couple of parameters for dropping
different kind of events.

I would like to know what the best practice is, do people activate those
"Drop" options?

The description is that they save storage space and improve performance.

In what case would one want to keep those events?