I’ve only met one other person that could write the complete Office 365 and Microsoft 365 licensing comparison. That person is Glenton Davis, Sr. Product Marketing Manager at Microsoft. (Although, I did stump him on a few CAS unified labeling features…after he schooled me about the new Microsoft 365 Security E5 SKU.) To put it another way: Microsoft subscriptions are confusing.
What did I just buy?
Or if you work in sales—what did I just sell? Microsoft has no shortage of comparison charts. Here are a few links that I used for reference to write this article:
- Office 365 Plan Options
- Office 365 Platform Service Description
- Microsoft 365 Business Service Description
When I see that Office 365 E3 sort of includes AIP, I always need to refer to my notes for clarification. As of February 2019, here is the full Microsoft 365 Licensing Comparison. (Full XLSX here)
Include Other Vendors When Making Your Microsoft 365 Licensing Comparison
At Infused Innovations, we prefer when our customers purchase a given feature set only once. Too often, we see a company purchase Enterprise Mobility + Security (EM+S) for the sole purpose of enabling Self-Service Password Reset (SSPR) with writeback for on-premises AD. That same company also owns Okta for SSO, AirWatch for MDM, and Netskope for CASB.
When we explain to the CFO that they already own EM+S, which contains similar functionality as those three other vendors, it’s usually a pretty quick discussion to get approval to start a proof of concept deployment standardizing on Microsoft 365. The budget that was allocated for the other vendors can then be used to purchase new security features like Microsoft Defender ATP and Azure Sentinel.
Circle the solutions you have deployed above. Is it more than $57/user/mo?
Infused Innovations partners with a few other security vendors to fill some gaps, including KnowBe4, CyberArk, and SecPod, but Microsoft’s 60+ security products cover most customer’s needs. The added benefit to standardizing on Microsoft services is that they all integrate with the Microsoft Intelligent Security Graph, which allows the services to worth with each other and reduce false positives.
Even if you think you have a good grasp of your Microsoft 365 and Office 365 Licensing, I’d encourage you to sign up for one of our free cyber security assessments to have one of our experts review what you already own and create a strategic cyber security roadmap for your organization.
Which Microsoft 365 license should I buy?
I already expressed my thoughts that you’re (likely) on the wrong Microsoft license. For an organization of any size with an online presence, you should seriously consider one of the Microsoft 365 SKUs. (Unless you have purchased parts of the bundle through an EA, non-profit, or educational SKU.)
Just as you can purchase a new car without adaptive cruise control to save money in exchange for having to manually turn cruise control on and off, you can purchase Office 365 by itself to reduce your initial costs at the expense of having manually review logs. But with the projected shortfall of 3.5 million cyber security professionals by 2020, you may actually be increasing your overall costs if you don’t invest in automation now.
Microsoft spends over $1 Billion a year on security research and uses AI to interpret 6.5 trillion signals daily via the Intelligent Security Graph. With over 3,500 security engineers, it’s possible that Microsoft has more employees in its cyber security department than you have in your entire organization. All you have to do to take advantage of this combined risk intelligence and automation is purchase the correct Microsoft 365 license.
Microsoft 365 F1 Licensing Comparison to Office 365 F1
Firstline workers, employees that only need email, and contractors are a few types of users that would benefit from the Microsoft 365 F1 license. The business value for investing in M365 F1 licenses include:
- Foster culture and community: By utilizing Microsoft Teams, your employees will have access to persistent chat, and provide your firstline workers access to the same corporate resources in SharePoint Online that are used by the rest of your organization.
- Train and upskill employees: Microsoft Teams can serve as your source of institutional knowledge. Train and upskill your employees, creating opportunities for workers to develop, grow, and apply their skills.
- Digitize business process: Give your firstline workers and contractors access to your organization’s modern digital workflows that are embedded in SharePoint, Flow, and Teams.
- Minimize risk and cost: Make sure your organization’s data is only accessed from compliant devices and reduce your attack surface for potential breaches.
Microsoft 365 F1 provides the following productivity tools:
- Exchange Online Kiosk
- SharePoint Online Kiosk
- Microsoft Teams
- 2 GB of OneDrive Storage
- Office Online for web versions of Word, Excel, and PowerPoint
The main reason to upgrade to Microsoft 365 F1 SKU from Office 365 F1 is to add mobile security features. These include:
- Multifactor Authentication (MFA)
- Conditional Access
- Intune for MDM and data sandboxing
- Office Message Encryption
- Microsoft Advanced Threat Analytics
Infused Innovations also recommends adding Office 365 Advanced Threat Protection (ATP) P1 to this SKU to help protect users from phishing attacks.
Microsoft 365 Business with Azure AD P2
If you have fewer than 300 employees and are currently using Office 365 E3, you need to switch to Microsoft 365 Business right now. Both licenses are $20/mo and Microsoft 365 Business adds Windows 10 Pro licensing, along with all the security features that you need to keep your organization secured.
Microsoft 365 Business includes most of the security features from Microsoft 365 F1 plus the Office 365 ATP P1 benefits.
However, M365 Business is missing conditional access, which allows you to deploy MFA to all your users without them noticing.
Update 6/12/2019: M365 Business now includes Conditional Access.
Infused Innovations recommends deploying Microsoft 365 Business with the Azure AD P2 add-on to gain the following benefits:
- Azure AD Identity Protection
- User Risk Profiling, including
- Impossible Travel
- Stolen credentials
- Anomalous behavior
- Automatically force password changes for breached accounts
- Automatically require MFA challenges for high risk users
Microsoft 365 E3 with Microsoft 365 E5 Security (Formerly Identity Threat Protection)
Microsoft 365 E3 with Microsoft 365 E5 Security is the new “hero” SKU if your organization doesn’t need VoIP. The Microsoft 365 E5 Security is $12/mo and adds the following advanced features to your M365 E3 SKU:
- Azure ATP
- Azure AD P2
- Office ATP P2
- Microsoft Cloud App Security
- Microsoft Defender ATP
The five SKUs above provide comprehensive cybersecurity licensing to detect breaches and perform digital forensics across the entire attack chain. The P2 features of Microsoft SKUs also add automation features that respond to breaches at the speed of the cloud. Human minds can no longer keep up with modern attacks. Microsoft 365 E3 with Microsoft 365 E5 Security provides enterprise-class security features for your organization.
Microsoft 365 E3 is also the entry-level SKU to allow access to Windows Virtual Desktop from a non-Windows 10 Pro device. All lower level Microsoft 365 SKUs require at least Windows 10 Pro to access WVD.
Microsoft 365 E5 Licensing Comparison
Microsoft 365 E5 allows you standardize on the entire Microsoft security and productivity stack for your organization. As previously mentioned, Microsoft 365 E5 adds VoIP integration to the Microsoft 365 E3 + Microsoft 365 E5 Security SKU.
The other important SKU that you receive is Azure Information Protection P2. AIP P2 allows you to automatically apply encryption templates to documents based on regular expression templates. Microsoft will be releasing a new unified labeling experience to use across your AIP, DLP, and Cloud App Security policies. Update 5/2019: The new unified labeling experience has been released.
Unless you’re on Microsoft 365 E5, licensing is confusing. Fortunately, Microsoft is trying to simplify and consolidate their bundles around the features that fit common roles across multiple industries.
However, you’re probably asking yourself something like: I already own Windows 10 Pro licenses—do I need Microsoft 365 Business? Or, I have a volume license for Windows 10 Enterprise-how can I license only Microsoft Defender ATP? The easiest answer is to schedule a call using the form below to speak with one of our licensing experts. Prices change every month and Microsoft releases new SKUs several times a year. Keeping up to date with Microsoft licensing can feel like a full-time job by itself. Which is why it’s important to select a Microsoft Gold partner to help guide you through the maze of licensing.