This is just about how Windows escapes command line parameters passed to multichain-cli differently. There's a note in the Windows README file about this, but here's what you need in this case:
multichain-cli chain1 createfrom 1... upgrade protocol-upgrade false "{\"protocol-version\":10011}"
The underlying JSON-RPC command is the same on all platforms.