Muted photograph of four people meeting in an office. Three are seated at a table. One is standing.

Enterprise Mobility + Security pricing options

Choose the version that best suits your organization.

Take your business further with Microsoft 365 Enterprise

Microsoft 365 brings together Office 365, Windows 10, and Enterprise Mobility + Security. It delivers a complete, intelligent solution to empower employees to be creative and work together, securely.

Learn more about Microsoft 365 Enterprise
Product feature

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5


Enterprise Mobility + Security E3

Enterprise Mobility + Security E5

Partial checkmark icons indicate a feature is partially included Partial checkmark icons indicate a feature is partially included Checkmark icons indicate a feature is included Checkmark icons indicate a feature is included

Identity and access management

This feature is partially included

Simplified access management and security

Multi-factor authentication

Conditional access

Risk-based conditional access

Not Included

Advanced security reporting

Privileged identity management

Not Included

Windows Server Client Access License (CAL)*

Managed mobile productivity

Mobile device management

Mobile application management

Advanced Microsoft Office 365 data protection

Integrated PC management

Integrated on-premises management

Information protection

This feature is partially included

Persistent data protection

Intelligent data classification and labeling

Not Included

Document tracking and revocation

Encryption key management per regulatory needs

Identity-driven security

This feature is partially included

Microsoft Advanced Threat Analytics

Microsoft Cloud App Security

Not Included

Azure Advanced Threat Protection

Not Included

Enterprise Mobility + Security E3

Enterprise Mobility + Security E5


* Customers purchasing Windows Server CAL agreements, System Center Configuration Manager, System Center Endpoint Protection, Microsoft Active Directory Rights Management Services CALs via the Microsoft Enterprise Volume Licensing agreements may purchase the Enterprise Mobility + Security Add-on offer.

** Open estimated retail per-month pricing. Volume discounts are also available. To receive a quote, contact your partner or Microsoft representative.

Enterprise Mobility + Security free trial

Try Enterprise Mobility + Security free for 90 days.

Enterprise Mobility + Security E5 includes new and advanced security capabilities that make up our holistic and innovative approach to security for the mobile enterprise. Some E5 capabilities were previously only available as standalone products, such as Microsoft Cloud App Security, or as products in preview, such as Microsoft Azure Active Directory Identity Protection, Azure Active Directory Privileged Identity Management, and Azure Information Protection.

Your best options for determining whether Enterprise Mobility + Security is right for you are to start a free trial of the E5 version, or consult with a sales specialist to learn more about how E3 or E5 can meet your needs.

No, Microsoft doesn't offer an E5 discount for existing E3 customers.

Both technologies assist in the goal of data loss prevention and are complementary. Azure Information Protection helps assure that data you are working on is classified, labelled, and protected based on business data policies. Office 365 offers similar capabilities, but from within Office 365 services: Microsoft Exchange and Microsoft SharePoint. Use these technologies together to achieve combined, significant levels of data protection.

Microsoft Intune, included with Enterprise Mobility + Security, lets you manage Office 365 mobile apps so you can maintain the rich, productive Office user experience while Intune helps keep your corporate data secure. Additionally, Azure Active Directory, used by Office 365, enhances Enterprise Mobility + Security by including features like self-service password reset, group membership, and advanced machine learning-based security and usage reporting.

Intune provides mobile device and application management across popular platforms: Windows, Mac OS X, Windows Phone, iOS, and Android. When Intune is connected with System Center Configuration Manager in a hybrid configuration, you can also manage Macs, Unix and Linux servers, and Windows Server machines from a single management console.

The built-in MDM for Office 365 capabilities are a subset of the features offered by Intune. MDM for Office 365 allows IT admins to control which devices have access to Office 365 data, provide the ability to erase Office 365 corporate data without wiping the entire device, and manage device settings, such as requiring PIN lock, jailbreak detection, and encryption. If you need protection beyond what’s included in Office 365, subscribe to Intune to obtain additional device and app management capabilities. Intune provides companies with comprehensive device management for both mobile devices and PCs, along with in-depth management of corporate applications, such as Office 365 and other apps.

Some Enterprise Mobility + Security E5 components are available for purchase separately, including Azure Active Directory, Microsoft Advanced Threat Analytics, and Intune. However, the components are designed to work together, creating a comprehensive solution to help you determine your mobility and security strategy, today and into the future. Purchasing the suite also represents a better value compared to purchasing the individual components.

To read more about the current state of devices, identity, and security, and how cloud-based solutions benefit you, download the Enterprise Mobility + Security white paper.