Ok thank you very much, it works.
var query = _classOneRepository.GetAll();
Since GetAllIncluding is only used with collections, it should get virtual with GetAll, right?
No that's the point. ClassOne is IMustHaveTenant and ClassTwo should be accessible to all tenants.