Microsoft Intune pricing
Learn about the plans and standalone options for purchasing Microsoft Intune products.
HOW TO PURCHASE
Explore purchase options
Purchase Intune products through different licenses or as add-ons and standalone products.
Microsoft 365 E3
Strengthen security, solve issues faster and keep every endpoint productive with cloud-based device and app management.
Microsoft 365 E5
Get the most value with all Intune and advanced endpoint management capabilities in Microsoft 365 E5, which includes Security Copilot at no additional cost.
Additional products
Get additional products to add-on to Microsoft Intune Plan 1 for organizations that do not subscribe to Microsoft 365 E3 or E5.
PRICING
See pricing details
Find the plan that best meets your needs.
RELATED PRODUCTS
Learn about other Microsoft Security products
Microsoft Security Copilot
Protect your organization with a generative AI-powered assistant for daily operations in security and IT.
Microsoft Defender for Endpoint
Help secure endpoints with industry-leading, multiplatform detection and response.
Microsoft Entra ID
Manage and protect users, apps, workloads, and devices.
Frequently asked questions
- Microsoft Intune offers advanced endpoint management and security capabilities available as standalone add-ons or as part of the Intune Suite. These include Endpoint Privilege Management (EPM), Enterprise App Management (EAM), Advanced Analytics, Remote Help, Microsoft Cloud PKI, Microsoft Tunnel for Mobile Application Management (MAM), Firmware-over-the-Air (FOTA) updates, and Specialized Device Management. However, most organizations should first check their existing Microsoft 365 E3 or E5 license — starting CY26 Q3.
- Microsoft Intune Plan 1 is the foundational endpoint management solution included in most Microsoft 365 enterprise licenses, covering cross-platform device management, built-in security, mobile application management, and endpoint analytics. Plan 2 extends Plan 1 with Microsoft Tunnel for Mobile Application Management, specialty and shared device management, and Firmware-over-the-Air (FOTA) updates.
- Intune Plan 1 is the foundational MDM/MAM tier included in most M365 enterprise licenses. Plan 2 is a targeted add-on (USD$4.00/user/month) that extends Plan 1 with specialized device management. Organizations with Microsoft 365 E3 or E5 licenses should first review what advanced capabilities are already included before purchasing additional add-ons. For organizations on other licensing plans, advanced capabilities — Remote Help, EPM, Advanced Analytics, EAM, and Cloud PKI — are available as standalone add-ons or as part of the Intune Suite (USD$10.00/user/month)
- Starting July 2026, Microsoft is rolling select advanced endpoint management capabilities directly into M365 E3 and E5. Microsoft 365 E3 customers will receive Remote Help, Advanced Analytics, Intune Plan 2 capabilities (Tunnel for MAM, FOTA, Specialty Devices). Microsoft 365 E5 customers get all of the above plus EPM, Cloud PKI, and Enterprise App Management. Tenants will receive a 30-day notice in Message Center before the update is activated.
- Yes. EPM, EAM, Advanced Analytics, Remote Help, and Microsoft Cloud PKI are all available as standalone add-ons, each priced individually (ranging from USD$2.00–USD$5.00/user/month). The full Intune Suite (USD$10.00/user/month) is the better value when deploying two or more modules at scale. Tunnel for MAM, FOTA, and Specialized Device Management are only available through Intune Plan 2 or the full Suite and not as standalone purchases.
- All advanced Intune capabilities require Microsoft Intune Plan 1 as the base license Plan 1 is included in Microsoft 365 E3, E5, EMS E3/E5, and can be purchased standalone at USD$8.00/user/month. An Azure account with Microsoft Entra ID (formerly Azure AD) is an implicit dependency, as Intune relies on Entra ID for identity and conditional access.
Follow Microsoft Security