How to make rdp work through vpn l2tp+ipsec on mikrotik?

Question

VPN

Help me to understand.
There are two Mikrotiks.
Behind them networks
The first has a real IP 193.*.*.*
Behind it is a network 10.0.3.0/24
The second is without a real
Behind it is a network 10.0.4.0/24
Raised an l2tp + ipsec server on the first router
At the first router vpn ip 10.0.10.100
At second router vpn ip 10.0.10.101 There
is a connection, there are pings in all directions both from routers and from computers behind routers.
There is a windows server (10.0.3.7) behind router 1, you need to connect to it via rdp.
I can’t set up an RDP connection from the network behind router 2 to the network behind router 1. And there is no access to shared resources either.
On the first router, the VPN server on the interface that looks into the local network specified proxy-arp , the default group was also changed to a new one.

Answer 1

It's about routing, add a static route on the second router to 10.0.3.0/24, through 10.0.10.100.

Answer 2

I registered the route here on the first router
and here on the second
one. When trying to connect via rdp, I am asked for a password, if I enter the left one, sometimes I get messages that the login and password do not fit, I enter it again and after a long wait, an error, and sometimes just an error and all. :( Is it possible to track the packets somehow, to understand where I messed up?
Here's another NAT on the first
and second
and firewall on the first
and second