I am setting up a new server template using (moving from Win Server 2012 R2 to Server 2016) and using the latest zabbix agent2 client (5.0.4). When porting over some UserParameter's I get an access denied error in the zabbix logs.

Here is an example of the UserParameter:
UserParameter=sockstat.tcp.inuse.count, netstat -ano | find /C "ESTABLISHED"

This is what I see in the zabbix log (debug level 4)
2020/10/14 11:47:25.494277 [1] processing update request (1 requests)
2020/10/14 11:47:25.494277 [1] registering new client
2020/10/14 11:47:25.494277 [1] adding new request for key: 'sockstat.tcp.inuse.count'
2020/10/14 11:47:25.494277 [1] created direct exporter task for plugin 'UserParameter' itemid:0 key 'sockstat.tcp.inuse.count'
2020/10/14 11:47:25.509905 executing direct exporter task for key 'sockstat.tcp.inuse.count'
2020/10/14 11:47:25.509905 [UserParameter] executing command:' netstat -ano | find /C "ESTABLISHED"'
2020/10/14 11:47:25.664326 [UserParameter] command:' netstat -ano | find /C "ESTABLISHED"' length:17 output:'Access denied - \'
2020/10/14 11:47:25.664326 executed direct exporter task for key 'sockstat.tcp.inuse.count'
2020/10/14 11:47:25.664326 sending passive check response: 'Access denied - \' to 'Proxy-Server-IP x.x.x.x'

I have changed the user account that the zabbix agent runs as to verify if it were a user permissions issue (new account had admin rights) but that didnt resolve the issue.

Running the command via dos on the server works with out issue.