Unable to do checkout on agent using Git

 I have Git LFS files I'm trying to checkout on the agent (not the default agent, but one I added on a separate server).  My understanding is that this is supported with the latest versions of TeamCity.  But no matter what I do, I keep getting "Failed to perform checkout on agent: Unable to run git at path ....[path to Git.exe]", and in the logs and console I see this:  "Caused by: java.io.IOException: Cannot run program "[Correct path to Git]" (in directory "."): CreateProcess error=5, Access is denied."

This problem occurs on every type of agent side Git checkout regardless of whether they are Git-LFS or not, but server side works OK for all but Git LFS.

It actually also doesn't work on the TeamCity server with the default agent if I specify "always use Agent checkout" either.

I am using a domain service account which has Admin permissions on the agent server.  This same account is being used to run TeamCity server and agents.

I have checked and the URL and credentials work for the repo.

I have checked using that service account and it is able to use Git Bash to clone the repository on both TeamCity Server and on Agent Server after providing the same credentials for VCS as are configured in the Team City build.

I have expanded the permissions on the Git and the Git LFS directories so that Everyone can read and execute these.

I have made sure to run the Agent using the Console and not as a Service.

I have set it up so that java.exe, git.exe, etc. run "As Administrator" by default.

Still no luck.  It's clearly a permissions problem, but heck if I know how to fix it.  Can you help?