I disabled HyperV services.    I set 'device guard' off in GPO.   I removed Windows Defender.   But when I did MSINFO32 virutalized-based security was still running and I could not use software virtualization / nesting.   I probably did several other things but at this point in time going to the windows host settings / security and disabling memory core isolation seems to have done the trick.   I can now nest.