> having to support Windows 11 through Active Directory is a nightmare now. MS has removed almost all admin control in favor of user choice

What does that mean - group policy has many fewer policies? Why would Microsoft do that - it is only used in organizations with IT departments, and they definitely want to automate and lock down configuration.