At my last job I was responsible for 70 windows 11 machines. At my current job it’s 20. These are i7/i9 spec with 64+GB memory and NVMe drives. No endpoint management software, just Intune for device registration.
They all have _very significant _ performance issues out of the box, with very long app startups, and very confusing slowdowns. I am 99% sure it’s windows defender doing an absolute crap ton of work on every single file open, and ignoring file and folder exclusions.
I know IT people often aren't given the time to dig into this stuff, but xperf and event tracing should reveal the culprit fairly quickly.
The best resource for this kind of stuff is Bruce Dawson's blog:
https://randomascii.wordpress.com/2015/09/24/etw-central/