Hi All,
Does anyone have any Exp or understanding of the Intune licensing model.
I spent most of yesterday trying to understand it.
Here is my scenario
I want to replace our AV solution with Microsoft Endpoint solution.
I work for a company where the vast majority of the PC’s are basically hot
desk PCs. users Log on to different ones every day. A breakdown is below,
-
18-20 Microsoft 365 Business Premium users
-
70 Business standard uses
-
200-250 unlicensed users (don’t use email or any 365 services)
I want to make sure every PC can be protected with Intune and MEM in the
business.
From my understanding:
Business Premium users include Intune and MEM
Business standard need an Intune user license added on
I am not sure on the non-licensed users. Can I buy Intune device
licenses?
Also, for all the users except (business premium) do I need to buy an
addon to use MEM within Intune? If so, do you know which license that would be.
Thanks in advance
Answer from daverattenbury on community.spiceworks.comHi All,
Does anyone have any Exp or understanding of the Intune licensing model.
I spent most of yesterday trying to understand it.
Here is my scenario
I want to replace our AV solution with Microsoft Endpoint solution.
I work for a company where the vast majority of the PC’s are basically hot
desk PCs. users Log on to different ones every day. A breakdown is below,
-
18-20 Microsoft 365 Business Premium users
-
70 Business standard uses
-
200-250 unlicensed users (don’t use email or any 365 services)
I want to make sure every PC can be protected with Intune and MEM in the
business.
From my understanding:
Business Premium users include Intune and MEM
Business standard need an Intune user license added on
I am not sure on the non-licensed users. Can I buy Intune device
licenses?
Also, for all the users except (business premium) do I need to buy an
addon to use MEM within Intune? If so, do you know which license that would be.
Thanks in advance
Intune is included in the following licenses:
Microsoft 365 E5
Microsoft 365 E3
Enterprise Mobility + Security E5
Enterprise Mobility + Security E3
Microsoft 365 Business Premium Microsoft 365 F1
Microsoft 365 F3
Microsoft 365 Government G5
Microsoft 365 Government G3
Intune for Education.
Most licenses that include Microsoft Intune also grant the rights to use Microsoft Endpoint Configuration Manager, as long as the subscription remains active.
I am setting up devices for my small business
Do I need Business Premium for all users in my Organisation if I want to manage their BYOD devices or Do I only need to provision premium license only for the Intune Administrator and rest of the people can be on Business Standard subscription?
What can I do with Intune (m365 Business Premium Plan?)
Questions About Implementing Microsoft Intune with Microsoft 365 Business Premium
What is Microsoft 365 Business Premium?
Business Premium is an integrated solution that brings together best-in-class productivity tools, security, and device management capabilities for small to medium-sized businesses. It's a comprehensive, cloud-based security solution that enables you to defend your business against advanced threats with sophisticated phishing and ransomware protection. Business Premium helps you safeguard your data, devices, and information.
Business Premium is fully integrated with Microsoft 365 Apps to provide you with a familiar location for administration, billing, and 24x7 support. It consists of enterprise-grade technology built for businesses with fewer than 300 users.
What's the difference between Microsoft 365 Business Standard, Microsoft 365 Business Premium, and Microsoft 365 Enterprise?
Microsoft has productivity and security management offerings that bring increasingly powerful features and functionality to small to medium-sized businesses:
Microsoft 365 Business Standard includes the apps and services that businesses need for remote work and collaboration. It includes Microsoft Teams, secure cloud storage, business email, and premium Office applications across devices.
Microsoft 365 Business Premium is a comprehensive cloud productivity and security solution that's designed and built for small and medium-sized businesses (1-300 users). Microsoft 365 Business Premium includes everything in Microsoft 365 Business Standard, plus the following security products:
- Microsoft Defender for Business
- Microsoft Defender for Office 365 Plan 1.
You get more cybersecurity and productivity capabilities, including advanced security protection, next-generation protection, endpoint detection and response, and threat & vulnerability management.
Microsoft 365 Enterprise is a complete, intelligent solution that empowers everyone to be creative and work together securely. Microsoft 365 for enterprise is designed for large organizations, but it's also available to small to medium-sized businesses who need the most advanced security and productivity capabilities.
For more information, see:
- Microsoft 365 User Subscription Suites for Small and Medium-sized Businesses
- Microsoft 365 for enterprise overview
How can I get Microsoft 365 Business Premium for my business?
You can purchase Business Premium using either of the following methods:
- Through a Microsoft Partner.
- Directly from Microsoft.
How you purchase Business Premium depends on your IT staff capability and whether you want to manage your own IT infrastructure. A Microsoft Partner can help you deploy and manage your IT infrastructure, including Microsoft solutions.
Videos
Hi Rajas,
Licenses is user based, and what there is assigned to a specific user is what features there is available for the specific user.
And yes, the licensing for Microsoft 365/Office 365 features can indeed be a bit complex :)
Here is an overview here (not official Microsoft page, but gives a nice overview): https://m365maps.com/
Regarding the users and how to assign licenses is descripted here: https://learn.microsoft.com/en-us/entra/fundamentals/license-users-groups and how it works in general here: https://learn.microsoft.com/en-us/microsoft-365/admin/manage/assign-licenses-to-users?view=o365-worldwide
Let me hear if you have more questions or this was helpful.
So if I understand your question correct: Yes, they need all the license.
@Rajas Khokle, Thanks for posting in Q&A. Based on my researching, DLP is a feature in Microsoft Purview. Microsoft Purview is a comprehensive set of solutions that can help your organization govern, protect, and manage data, wherever it lives.
https://learn.microsoft.com/en-us/purview/purview
DLP for different app needs different licenses. The user with the license can use this feature. So the license needs to assign to end users. You can see more details in the following link:
https://learn.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance#microsoft-purview-data-loss-prevention-endpoint-data-loss-protection-dlp
Hope the above information can help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Hello everyone,
I am working in an "old school" - environment. Most things runs on prem (Fileserver, ActiveDirectory, bunch of programs and services) except for exchange mail server. We do use currently microsoft 365 with the business standard plan.
Since we are hybrid environment because of exchange and SAML with some apps with the free entra plan, I am thinking about the benefits of switching to M365 Business Premium.
I do like the idea of having more control over MFA and user identity which is included in M365 business premium.
But I do not understand what I can do with "intune" part of M365 business premium. We currently have a patch management and software distribution running on-prem (Endpoint Central). It does come with an integration to intune. As far as I understand intune can provide apps and software updates? Why can't it replace our current patch management then?
And what is ConfigMgr? Is that running on-prem or does it run in cloud?
Someone here can please help me understand the capabilities of intune / config mgr (sccm?)?