It’s all turned on by default even in Windows 11 Enterprise. You can turn everything off via AD Group Policy or your MDM but you have to go through the labyrinth of Windows policies and find them all. Thankfully you only have to do it once and then push it to all of your devices.