DMZ Zone 1 connecting to RODC in Zone 2 (separate subnets configured with Cisco ASA)

Good afternoon, I am hoping to have a member server in Zone 1 to authenticate to RODC in Zone 2 but stuck atm.

Here is my setup:

I have 3 zones setup with Cisco ASA (I have already called Cisco to make sure everything is working on the ASA and Vlan on the Cisco switch)

Zone 1 (DMZ) IIS and reverse proxy (192.168.16.0)

Zone 2 App server with RODC (192.168.26.0)

Zone 3 Internal Network (192.168.6.0) DC

ASA configurations

Zone 1 can only talk to Zone 2

Zone 2 can talk to Zone 1 and 3

Zone 3 can talk to Zone 1 and 2

When I login to server on zone 1 with domain credentials it states There are currently no logon servers available to service the logon request

I can log on locally but need to be able to expose public RDP (zone 1) for outside folks to use domain credentials.

I am using all Windows 2012 R2 Servers.