Something went wrong. Confirm you are using the correct sign-in information and that your organization uses this feature. You can try to do this again or contact your system administrator with the error code 80070774. In a Microsoft Entra hybrid Autopilot deployment this happens before the device restarts, when it times out at the initial sign-in screen: the domain controller cannot be found or reached, or the device has been put into a state from which it can't join the domain at all.
0x80070774
Hybrid Autopilot can't reach a domain controller
What it means
Common causes
The Autopilot profile uses the Assign user feature. Assigning a user performs a Microsoft Entra join at the initial sign-in screen, which leaves the device unable to join the on-premises domain. Assign user belongs to standard Entra join scenarios only, never to hybrid ones.
The Entra device object associated with the Autopilot object has been deleted.
The device genuinely has no line of sight to a domain controller at that moment — VPN not yet connected, wrong VLAN, DNS pointing at the wrong servers.
The Offline Domain Join (ODJ) Connector lacks permission to create computer objects in the target OU.
How to fix it
In the Microsoft Intune admin center, go to Devices > Windows > Windows devices, select the device, choose the ellipsis and select Unassign user. Wait for it to finish, confirm the hybrid Autopilot profile is assigned, and retry OOBE.
If the Entra device object was deleted, delete the Autopilot object and re-import the hardware hash to generate a fresh one.
Check the ODJ Connector Service log on the connector server for Event ID 30132.
ErrorCode 5with The ODJ connector does not have sufficient privileges means OU delegation is wrong.Delegate control over the target OU to the computer account running the connector: Create a custom task to delegate > Computer objects, with Create selected objects in this folder and Delete selected objects in this folder, granting Full Control.
Confirm the device can reach a domain controller on the network it provisions from — hybrid Autopilot has no way to defer that requirement.
Frequently asked
Can I use Assign user with hybrid Autopilot?
No. Assign user triggers a Microsoft Entra join at the sign-in screen, which puts the device in a state where it cannot join your on-premises domain. Use it only in standard Entra join Autopilot scenarios.