Summary
This licensing guide explains what type of devices qualify as a 'Qualified Device' and what type of users qualify as a 'Qualified User' under applicable Microsoft Commercial Licensing agreements and enrollments, such as the Microsoft Enterprise Agreement (EA).
Details
Qualified Devices
Some Commercial Licensing agreements and enrollments, such as the Microsoft Enterprise Agreement (EA) Enrollment, offer organization-wide licensing with tiered pricing that depends on the number of Qualified Devices. Microsoft defines a Qualified Device as follows:
“Qualified Device” means any device that is used by or for the benefit of Enrolled Affiliate’s Enterprise and is: (1) a personal desktop computer, portable computer, workstation, or similar device capable of running Windows Pro locally (in a physical or virtual operating system environment), or (2) a device used to access a virtual desktop infrastructure (“VDI”). Qualified Devices do not include any device that is: (1) designated as a server and not used as a personal computer, (2) an Industry Device, or (3) not a Managed Device. At its option, the Enrolled Affiliate may designate any device excluded above (e.g., Industry Device) that is used by or for the benefit of the Enrolled Affiliate’s Enterprise as a Qualified Device for all or a subset of Enterprise Products or Online Services the Enrolled Affiliate has selected.
Note: Definition of Qualifying Devices as it appears in the Microsoft EA Enrollment, October 2023.
Exclusions
As stated in the definition, certain devices can be specifically excluded, such as Industry Devices or unmanaged devices. You can choose to include any excluded devices as Qualified Devices for all or a subset of the enterprise products or online services you select. Including these devices can be advantageous because you can license these additional devices under your enrollment to gain potential discounts and other benefits versus licensing them through a separate agreement. It is easy to determine some of the devices that are excluded, particularly Industry Devices (defined in full below), unmanaged devices (defined in full below), and servers (devices running a server operating system and used only as a server).
“Industry Device” (also known as line of business device) means any device that: (1) is not useable in its deployed configuration as a general purpose personal computing device (e.g., personal computer), a multi-function server, or a commercially viable substitute for one of these systems, and (2) only employs an industry or task-specific software program (e.g., a computer-aided design program used by an architect or a point of sale program) (“Industry Program”). The device may include features and functions derived from Microsoft software or third-party software. If the device performs desktop functions (e.g., email, word processing, spreadsheets, database, network or Internet browsing, or scheduling, or personal finance), then the desktop functions: (1) may only be used for the purpose of supporting the Industry Program functionality, and (2) must be technically integrated with the Industry Program or employ technically enforced policies or architecture to operate only when used with the Industry Program functionality.
Note: Definition of Industry Device as it appears in the Microsoft EA Enrollment, October 2023.
Unmanaged devices - Determining which devices are not “managed”
If Customer’s volume licensing agreement refers to the Product Terms, the Product List, or the PUR for defining managed Qualified Devices, the following terms apply. Customer “manages” any device on which it directly or indirectly controls one or more operating system environments. For example, Customer manages any device:
- it allows to join its domain, or
- it authenticates as a requirement to use applications while on its premises, or
- it installs agents on (e.g., anti-virus, antimalware or other agents mandated by the Customer’s policy), or
- to which it directly or indirectly applies and enforces group policies, or
- on which it solicits or receives data about, and configures, or gives instructions to hardware or software that is directly or indirectly associated with an operating system environment, or
- it allows to access a virtual desktop infrastructure (VDI) outside of Windows SA, Microsoft Intune (Device) or Windows Virtual Desktop Access Roaming Rights
A device that accesses a VDI under Roaming Rights only or utilizes Windows To Go on a Qualifying Third-Party Device off the Customer’s premises only, and is not managed for other purposes as described here, is not considered “managed” for purposes of this definition.
Note: Definition of Management for Qualifying Devices, Microsoft Product Terms, May 2025
You may find it helpful to treat the definition of the 'management' list as a checklist. If any example of management applies to the device—for instance, if you join it to a domain—then you manage the device, and it qualifies as a Qualified Device
Here are some of the most common actions that classify a device as a Managed Device:
- A device connecting to a VDI on-premises is always a Qualified Device.
- A managed device qualifies as a Qualified Device. All the items below constitute “management”.
- The device joins the organization’s domain.
- The device authenticates as a requirement to use applications while on-premises.
- Agents (for example, antivirus, antimalware, or other agents mandated by the organization’s policy) are installed on the device.
- Windows group policies (or policies controlled by other management software) are directly or indirectly applied and enforced (excludes scanning the device and only notifying the user if it is not up to date).
- The organization solicits or receives data about, configures, or gives instructions to hardware or software that is directly or indirectly associated with an operating system environment.
Qualified Users
Similar to the organization-wide licensing option for Qualified Devices, customers can choose to license Qualified Users instead of Qualified Devices or use a combination of both—provided that only users covered with a user license use any Qualified Devices not covered by a device license. Some Commercial Licensing agreements and enrollments, such as the Microsoft Enterprise Agreement (EA) Enrollment, offer organization-wide licensing with tiered pricing based on the number of Qualified Users.
Microsoft defines a Qualified User as follows:
"Qualified User” means a person (e.g., employee, consultant, contingent staff) who: (1) is a user of a Qualified Device, or (2) accesses any server software requiring an Enterprise Product Client Access License or any Enterprise Online Service. It does not include a person who accesses server software or an Online Service solely under a License identified in the Qualified User exemptions in the Product Terms.
Note: Definition of Qualifying User as it appears in the Microsoft EA Enrollment, October 2023.
Frequently Asked Questions
See FAQ page.