I noticed you edited the question with the solution. Thanks for sharing it with us, it will be very useful for similar issues!
While it says it is for older systems, information from that link solved the problem. When I have time to address the issue, I will go back and undo one of the below changes and see if it comes back - binary test to see if it is just one of the issues or both together.
Specifically I did these things:
- Run “bcdedit /enum {current}”
- Note down the hypervisorlaunchtype in case this needs to be reverted
- Run “bcdedit /set hypervisorlaunchtype off” to disable hypervisor Close the command prompt after executing the commands and restart the system.
and
- Edit group policy (gpedit)
- Go to Local Computer Policy > Computer Configuration > Administrative Templates > System
- Double Click on Device Guard on the right hand side to open.
- Double Click on "Turn On Virtualization Security" to open a new window
- It would be "Not Configured", Select "Disable" and click "Ok"
- Close the Group Policy Editor.
- Restart the system