Skip to main content

Enterprise Mobility + Security Pricing Options

Choose the subscription that best suits your organization.

Intune

$6.00**

per user per month

$6.00**

per user per month

Enterprise Mobility + Security

E3

$8.74**

per user per month

  • Azure Active Directory Premium P1
  • Intune
  • Azure Information Protection P1
  • Advanced Threat Analytics

$8.74**

per user per month

Enterprise Mobility + Security

E5

$14.80**

per user per month

  • Azure Active Directory Premium P2
  • Intune
  • Azure Information Protection P2
  • Advanced Threat Analytics
  • Cloud App Security

$14.80**

per user per month

Mobile device management

Enroll corporate and personal devices to provision settings, enforce compliance, and protect your corporate data.

Included in Intune.

Intune

Included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Mobile application management

Publish, configure, and update mobile apps on enrolled and unenrolled devices, and secure or remove app-associated corporate data.

Included in Intune.

Intune

Included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Advanced Microsoft Office 365 data protection

Extend management and security capabilities across users, devices, apps, and data, while preserving a rich, productive end-user experience.

Included in Intune.

Intune

Included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Integrated PC management

Centralize management of PCs, laptops, and mobile devices from a single administrative console, and produce detailed hardware and software configuration reporting.

Included in Intune.

Intune

Included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Integrated on-premises management

Extend your on-premises management to the cloud from a single console with Microsoft System Center Configuration Manager and Microsoft System Center Endpoint Protection integration for enhanced PC, Mac, Unix/Linux server, and mobile device administration.

Included in Intune.

Intune

Included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Simplified access management and security

Centrally manage single sign-on across devices, your datacenter, and the cloud.

Not included in Intune.

Intune

Included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Multi-factor authentication

Strengthen sign-in authentication with verification options, including phone calls, text messages, or mobile app notifications, and use security monitoring to identify inconsistencies.

Not included in Intune.

Intune

Included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Conditional access

Define policies that provide contextual controls at the user, location, device, and app levels to allow, block, or challenge user access.

Not included in Intune.

Intune

Included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Risk-based conditional access

Protect apps and critical data in real time using machine learning and the Microsoft Intelligent Security Graph to block access when risk is detected.

Not included in Intune.

Intune

Not included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Advanced security reporting

Monitor suspicious activity with reporting, auditing, and alerts, and mitigate potential security issues using focused recommendations.

Not included in Intune.

Intune

Included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Privileged identity management

Provide timely, on-demand administrative access to online services with access-related reporting and alerts.

Not included in Intune.

Intune

Not included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Windows Server Client Access License (CAL)*

Provide each user access to server functions from multiple devices for a single fee.

Not included in Intune.

Intune

Included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Persistent data protection

Encrypt sensitive data and define usage rights for persistent protection regardless of where data is stored or shared.

Not included in Intune.

Intune

Included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Intelligent data classification and labeling

Configure policies to automatically classify and label data based on sensitivity and then apply persistent protection.

Not included in Intune.

Intune

Not included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Document tracking and revocation

Monitor activities on shared data and revoke access in case of unexpected events.

Not included in Intune.

Intune

Included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Encryption key management per regulatory needs

Choose default key management options or deploy and manage your own keys to comply with regulations.

Not included in Intune.

Intune

Included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Microsoft Advanced Threat Analytics

Detect abnormal behavior in on-premises systems and identify advanced targeted attacks and insider threats before they cause damage.

Not included in Intune.

Intune

Included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Microsoft Cloud App Security

Gain visibility, control, and protection for your cloud-based apps, while identifying threats, abnormal usage, and other cloud security issues.

Not included in Intune.

Intune

Not included in E3.

Enterprise Mobility + Security E3

Included in E5.

Enterprise Mobility + Security E5

Consolidated threat management dashboard

View machine learning-based threat detection data, risk severity calculations, and focused remediation recommendations, all in a single view.

Not included in E3.

Intune

Included in E5.

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Advanced threat analytics

Detect abnormal behavior in on-premises systems and identify advanced security attacks and insider threats before they cause damage.

Included in E3.

Intune

Included in E5.

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Intune

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Intune

$6.00**

per user per month

Enterprise Mobility + Security

E3

$8.74**

per user per month

Enterprise Mobility + Security

E5

$14.80**

per user per month

* Customers purchasing Windows Server CAL agreements, System Center Configuration Manager, System Center Endpoint Protection, Microsoft Active Directory Rights Management Services CALs via the Microsoft Enterprise Volume Licensing agreements may purchase the Enterprise Mobility + Security Add-on offer.

** Open estimated retail per-month pricing. Pricing is in US dollars and can vary by country. Volume discounts are also available. To receive a quote, contact your partner or Microsoft representative.

Frequently asked questions

Expand allCollapse all
What are the main differences between E3 and E5?

Enterprise Mobility + Security E5 includes new and advanced security capabilities that make up our holistic and innovative approach to security for the mobile enterprise. Some E5 capabilities were previously only available as standalone products, such as Microsoft Cloud App Security, or as products in preview, such as Microsoft Azure Active Directory Identity Protection, Azure Active Directory Privileged Identity Management, and Azure Information Protection.

How do I know which Enterprise Mobility + Security offering is the right fit for my organization?

Your best options for determining whether Enterprise Mobility + Security is right for you are to start a free trial of the E5 version, or consult with a sales specialist to learn more about how E3 or E5 can meet your needs.

I currently use Enterprise Mobility + Security E3. Is there a discount for me to upgrade my users to E5?

No, Microsoft doesn't offer an E5 discount for existing E3 customers.

Enterprise Mobility + Security includes Azure Information Protection. How is this included service different from the data loss prevention capabilities of Office 365?

Both technologies assist in the goal of data loss prevention and are complementary. Azure Information Protection helps assure that data you are working on is classified, labelled, and protected based on business data policies. Office 365 offers similar capabilities, but from within Office 365 services: Microsoft Exchange and Microsoft SharePoint. Use these technologies together to achieve combined, significant levels of data protection.

I already have Office 365. How does it integrate with Enterprise Mobility + Security?

Microsoft Intune, included with Enterprise Mobility + Security, lets you manage Office 365 mobile apps so you can maintain the rich, productive Office user experience while Intune helps keep your corporate data secure. Additionally, Azure Active Directory, used by Office 365, enhances Enterprise Mobility + Security by including features like self-service password reset, group membership, and advanced machine learning-based security and usage reporting.

For more information, read this post on the Enterprise Mobility + Security blog.

What platforms does Intune support?

Intune provides mobile device and application management across popular platforms: Windows, Mac OS X, Windows Phone, iOS, and Android. When Intune is connected with System Center Configuration Manager in a hybrid configuration, you can also manage Macs, Unix and Linux servers, and Windows Server machines from a single management console.

What's the difference between Intune and the built-in mobile device management capabilities of Office 365?

The built-in mobile device management for Office 365 capabilities are a subset of the features offered by Intune. Mobile device management for Office 365 allows IT admins to control which devices have access to Office 365 data, provide the ability to erase Office 365 corporate data without wiping the entire device, and manage device settings, such as requiring PIN lock, jailbreak detection, and encryption. If you need protection beyond what’s included in Office 365, subscribe to Intune to obtain additional device and app management capabilities. Intune provides companies with comprehensive device management for both mobile devices and PCs, along with in-depth management of corporate applications, such as Office 365 and other apps.

Can I buy the Enterprise Mobility + Security components as standalone products?

Some Enterprise Mobility + Security E5 components are available for purchase separately, including Azure Active Directory, Microsoft Advanced Threat Analytics, and Intune. However, the components are designed to work together, creating a comprehensive solution to help you determine your mobility and security strategy, today and into the future. Purchasing the suite also represents a better value compared to purchasing the individual components.

To read more about the current state of devices, identity, and security, and how cloud-based solutions benefit you, download the Enterprise Mobility + Security white paper.

How can I ask further questions?

Contact us to engage our Enterprise Mobility + Security sales team.

Back To Top