On some Windows hosts with an EFI BIOS, DeviceGuard or CredentialGuard may be active by default,
In my first tries to fix this issue one of the first things I did was make sure DeviceGuard and CredentialGuard were disabled. So if turning on EFI enables them, it is not visible anywhere.I wonder if you had these enabled at first. These turn on Hyper-V.