You can get this error from a Windows group policy misconfiguration. This class of error suggests that ZeroTier is working correctly.
Confirm that ZeroTier is working correctly by trying a different service on the Windows host – PowerShell, SMB, whatever – and then set an appropriate access policy for RDP.