Good morning,
Most laptops purchased from consumer retail channels ship with Windows 11 Home, which explicitly blocks the use of corporate Entra ID (formerly Azure AD) accounts during the initial setup. It requires a personal Microsoft Account (MSA) to proceed. When you input your @icfo.net or @icfo.eu credentials, the system is querying the consumer identity provider, which has no record of your organization's private directory tenant, resulting in the error.
To resolve this and make the machine usable for work, you must complete the initial setup using a personal email address (like an Outlook.com or Gmail address) to create the local user profile. Once you have successfully logged in and reached the Windows desktop, you can then bridge your corporate identity. Navigate to Settings > Accounts > Access work or school and click Connect. Enter your work credentials in the dialogue box that appears. This process performs a "Workplace Join" or MDM enrollment, which registers the device with your organization's server and pushes down necessary certificates and Single Sign-On tokens for Outlook, Teams, and Edge, effectively treating the laptop as a work device without requiring a full domain re-image.
If you are certain the device is running Windows 11 Pro and intended to perform a full domain join (Entra ID Join) right out of the box, you likely missed the branch in the setup menu where you must select "Set up for work or school" rather than "Set up for personal use." However, given the error behavior, the Windows Home restriction is the primary blocker. Proceed with a personal account setup to unlock the OS, then integrate the work account via Settings.
I hope you've found something useful here. If it helps you get more insight into the issue, it's appreciated to accept the answer. Should you have more questions, feel free to leave a message. Have a nice day!
VP