>Does ESX remove VT access from the guest OS?
Let's see how VT works. OS kernel works on Ring 0 (full privileges), user code works above. Before VT virtualization platforms had to use binary rewriting - modifying guest OS code on-the-fly.
What VT does? It actually just introduce Ring -1, so hypervisor can work on Ring -1 and Guest OS kernel can work on usual Ring 0. VT is a must for running 64bit guests, because of technical reasons - fully virtualized 64bit OSes can not work on Ring 1.
VM can not work on level below hypervisor or even on the same level, only above. But since VM is nested, hypervisor 2 (virtual) is working on Ring 0 and have to use binary rewriting, so nested VM have to work on Ring 1 -> 32 bit only.
---
MCSA, MCTS Hyper-V, VCP 3/4, VMware vExpert
http://blog.vadmin.ru