...
Each client must click the “Allow DNS” button.
...
Windows Active Directory
Some group policies can prevent managed DNS from working.
See fix here:https://discuss.zerotier.com/t/new-dns-features-dont-appear-to-work/982/7
Alternatively
It’s also possible to put your ZeroTier Managed IP Addresses in public DNS. That is, purchase a domain name from a registrar and create A and/or AAAA records that point to your virtual IP addresses.
...