I disabled HyperV services. I set 'device guard' off in GPO. I removed Windows Defender. But when I did MSINFO32 virutalized-based security was still running and I could not use software virtualization / nesting. I probably did several other things but at this point in time going to the windows host settings / security and disabling memory core isolation seems to have done the trick. I can now nest.
