In the routing world, and configuring a GRE tunnel - you would get the same issue if you route the GRE end points into the tunnel, the tunnel cannot form - chicken and the egg.
I will not ask why you are soing this, but you will need to split-tunnel the traffic you need to encrypt, not the IP connection that the RDP session is created with.
HTH./