An entirely unsupported, use at your own risk custom installation script for the Windows Zabbix Agent 2, which reconfigures the service to run with NT AUTHORITY\LocalService "minimum privileged account" and which follows Zabbix best practices.
This works on PowerShell 5, but not on PowerShell 6/7, due to reduced functionality in Get-WmiObject. This probably needs migration to Get-CimObject for pwsh support.