Videos
What is Microsoft 365 Business Premium?
Business Premium is an integrated solution that brings together best-in-class productivity tools, security, and device management capabilities for small to medium-sized businesses. It's a comprehensive, cloud-based security solution that enables you to defend your business against advanced threats with sophisticated phishing and ransomware protection. Business Premium helps you safeguard your data, devices, and information.
Business Premium is fully integrated with Microsoft 365 Apps to provide you with a familiar location for administration, billing, and 24x7 support. It consists of enterprise-grade technology built for businesses with fewer than 300 users.
How can I get Microsoft 365 Business Premium for my business?
You can purchase Business Premium using either of the following methods:
- Through a Microsoft Partner.
- Directly from Microsoft.
How you purchase Business Premium depends on your IT staff capability and whether you want to manage your own IT infrastructure. A Microsoft Partner can help you deploy and manage your IT infrastructure, including Microsoft solutions.
What's the difference between Microsoft 365 Business Standard, Microsoft 365 Business Premium, and Microsoft 365 Enterprise?
Microsoft has productivity and security management offerings that bring increasingly powerful features and functionality to small to medium-sized businesses:
Microsoft 365 Business Standard includes the apps and services that businesses need for remote work and collaboration. It includes Microsoft Teams, secure cloud storage, business email, and premium Office applications across devices.
Microsoft 365 Business Premium is a comprehensive cloud productivity and security solution that's designed and built for small and medium-sized businesses (1-300 users). Microsoft 365 Business Premium includes everything in Microsoft 365 Business Standard, plus the following security products:
- Microsoft Defender for Business
- Microsoft Defender for Office 365 Plan 1.
You get more cybersecurity and productivity capabilities, including advanced security protection, next-generation protection, endpoint detection and response, and threat & vulnerability management.
Microsoft 365 Enterprise is a complete, intelligent solution that empowers everyone to be creative and work together securely. Microsoft 365 for enterprise is designed for large organizations, but it's also available to small to medium-sized businesses who need the most advanced security and productivity capabilities.
For more information, see:
- Microsoft 365 User Subscription Suites for Small and Medium-sized Businesses
- Microsoft 365 for enterprise overview
Hello everyone,
I am working in an "old school" - environment. Most things runs on prem (Fileserver, ActiveDirectory, bunch of programs and services) except for exchange mail server. We do use currently microsoft 365 with the business standard plan.
Since we are hybrid environment because of exchange and SAML with some apps with the free entra plan, I am thinking about the benefits of switching to M365 Business Premium.
I do like the idea of having more control over MFA and user identity which is included in M365 business premium.
But I do not understand what I can do with "intune" part of M365 business premium. We currently have a patch management and software distribution running on-prem (Endpoint Central). It does come with an integration to intune. As far as I understand intune can provide apps and software updates? Why can't it replace our current patch management then?
And what is ConfigMgr? Is that running on-prem or does it run in cloud?
Someone here can please help me understand the capabilities of intune / config mgr (sccm?)?
Dear Ryan McGuire1,
Good day! Thank you for posting to Microsoft Community.
Typically, to enroll devices at Intune you need any Microsoft Intune license include in the below list. If your subscription doesn't list below, you have an option to purchase a Microsoft Intune plan 1 add-on license. you can refer to Microsoft Intune Plans and Pricing
Microsoft 365 E5
Microsoft 365 E3
Enterprise Mobility + Security E5
Enterprise Mobility + Security E3
Microsoft 365 Business Premium
Microsoft 365 F1
Microsoft 365 F3
Microsoft 365 Government G5
Microsoft 365 Government G3
Intune for Education
For additional information, you can refer to Licenses available for Microsoft Intune | Microsoft Learn
Regarding the admin license, administrators who manage devices through the Intune Admin Center do not need a special license beyond the standard Intune license. However, they must have the appropriate permissions assigned within the Intune Admin Center.
If you have any other question or I have got you wrong, please feel free to let me know.
Thanks for your precious time. Have a nice day!
Sincerely,
Libeamlak | Microsoft Community Moderator
So we just need to have our end users device license as one of the plans below or can be purchase separately as an Intune Plan 1 license, correct?
Microsoft 365 E5
Microsoft 365 E3
Enterprise Mobility + Security E5
Enterprise Mobility + Security E3
Microsoft 365 Business Premium
Microsoft 365 F1
Microsoft 365 F3
Microsoft 365 Government G5
Microsoft 365 Government G3
Intune for Education
https://docs.microsoft.com/en-us/microsoft-365/business/support/microsoft-365-business-faqs
We have been trialling and testing Microsoft 365 Business and I have had a support request open for a couple of days to find out why certain settings were not applying when set through the full Intune console.
According to the support representative the only supported settings for Intune are the simplified ones available through portal.office.com - if you are delving into the full Intune console then certain things just will randomly not work and they will not support.
Why put this on their site then? " Features not available in the simplified management console in Microsoft 365 Business, like 3rd party app management and configuration of things like WiFi profiles, VPN certificates, etc., can be managed in full Intune console. "
EDIT: https://i.imgur.com/3SlNc6K.png as an example, ones marked red don't work, ones marked green do.
Does Microsoft 365 Business include the full capabilities of Microsoft Intune?
Yes, Microsoft 365 Business subscribers are licensed to use full Intune capabilities for iOS, Android, MacOS, and other cross-platform device management. Features not available in the simplified management console in Microsoft 365 Business, like 3rd party app management and configuration of things like WiFi profiles, VPN certificates, etc., can be managed in full Intune console.
https://docs.microsoft.com/en-us/microsoft-365/business/support/microsoft-365-business-faqs
What is your client licensing? Just like in a GPO environment, many Windows policy settings only work if you are Enterprise licensed for your windows 10 installs.
My understanding is that M365B* does not include support for Full Intune, but does give you access. That is to say that my understanding is full Intune has been exposed, but you don't get help on anything beyond what you can do in the simplified GUI.
Grab a Windows 10 Enterprise image and test the policies on that. You could do this by either re-building a machine as E* from a VL ISO, or if you have E series windows licensing in the client portal, you can just assign one to an AzureAD user, and when that AzureAD user logs on to an AzureAD bound windows 10 machine it should automatically step the machine to enterprise in place.
Remember that M365B* series licenses aren't designed for situations where you have _any_ on-prem or hybrid infrastructure, where you have a lot of specific regulatory or compliance needs, or where you want a lot of central preference-esque policy control per machine. All of these scenarios are considered Enterprise-Class features at this point. As such the only officially supported way to accommodate for these and other similar situations will be the M365E* series licenses which include the correct SKUs and support for those expanded-usage-case scenarios.
-Karl P
Hi Rajas,
Licenses is user based, and what there is assigned to a specific user is what features there is available for the specific user.
And yes, the licensing for Microsoft 365/Office 365 features can indeed be a bit complex :)
Here is an overview here (not official Microsoft page, but gives a nice overview): https://m365maps.com/
Regarding the users and how to assign licenses is descripted here: https://learn.microsoft.com/en-us/entra/fundamentals/license-users-groups and how it works in general here: https://learn.microsoft.com/en-us/microsoft-365/admin/manage/assign-licenses-to-users?view=o365-worldwide
Let me hear if you have more questions or this was helpful.
So if I understand your question correct: Yes, they need all the license.
@Rajas Khokle, Thanks for posting in Q&A. Based on my researching, DLP is a feature in Microsoft Purview. Microsoft Purview is a comprehensive set of solutions that can help your organization govern, protect, and manage data, wherever it lives.
https://learn.microsoft.com/en-us/purview/purview
DLP for different app needs different licenses. The user with the license can use this feature. So the license needs to assign to end users. You can see more details in the following link:
https://learn.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance#microsoft-purview-data-loss-prevention-endpoint-data-loss-protection-dlp
Hope the above information can help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.