Although ASR is native to Defender for Endpoint, Windows 11 allows limited management via GPO:
: The local GPO is no longer a single entity. Windows 11 maintains: