Microsoft pulled an old trick out of their sleeve and implemented a feature, Device Guard, that requires virtualization. And of course it blocks other uses of the virtualization hardware, except, surprise surprise, their own virtualization solution.
D-, does not play well with others.
If your company requires Device Guard you can only use software based virtualization or Hyper-V.
https://support.microsoft.com/en-us/help/3204980/virtualizat...
https://exoticbaryon.anset.org/2017/09/18/when-virtualbox-wo...
Disclosure: work at Microsoft on the Hyper-V team.
on init, the Hyper-V driver hijacks the running Windows instance, schedules it as the 'root partition', and runs it like just another VM.
unlike 'child partitions', the root partition still has non-virtualized drivers, which run unimpeded by privileged instruction traps.
when a child partition (guest VM) is started, it's scheduled as a peer to the root. its Virtual Processors (VPs) run alongside the root partition's VPs.
when the child partition traps into the hypervisor, or uses one of the enlightened drivers, the hypervisor dispatches a bus request to the root partition, which handles the IRQ using a Virtual Service Provider implemented by the host Windows kernel.
so the hypervisor is kind of a bridge between the host Windows and the child VMs, but the host Windows actually runs as a sort of privileged VM itself, just one with full hardware access and scheduling priority.
* I work for MS, but not on any of these things.
There's 2 huge things missing from the Hyper-V integration client (LIS) when running Linux with a GUI in a VM which makes it a non-starter:
1) There is no cut and paste between Windows and a Linux Hyper-V VM.
2) There is no way to resize a Linux Hyper-V VM window. The most you can do is to set it at boot time and the max size is 1920x1080.
Kind of a pity since Hyper-V itself works very well.
Disclosure: work for Microsoft on the Hyper-V team.
[1] https://blogs.technet.microsoft.com/virtualization/2017/11/1...
In fact Ubuntu is so good in Virtualbox that I even get away with running HN's hated Electron apps in the VM!