| Feature | Microsoft 365 Business Premium ✕ | Microsoft 365 Business Standard ✕ |
|---|---|---|
| Key questions | ||
| Conditional access Entra ID Premium sign-in policies | P1 | — |
| Device management Intune for laptops and phones | ✓ | Basic |
| Endpoint protection Microsoft Defender on devices | Business | — |
| Email threat protection Defender for Office 365 | Plan 1 | — |
| Data loss prevention Stop sensitive data leaving | ✓ | — |
| eDiscovery Legal hold and investigations | ✓ | — |
| Email & collaboration | ||
| Email archiving & retention | ✓ | — |
| Files & content | ||
| Universal Print | ✓ | — |
| Identity & access | ||
| Entra ID P1 (Conditional Access, SSO) | ✓ | — |
| Multi-factor authentication | ✓ | — |
| Devices & management | ||
| Intune (full device management) | ✓ | — |
| Windows Update / Autopatch | ✓ | — |
| Threat protection | ||
| Defender for Cloud Apps | ✓ | — |
| Defender for Office 365 (Plan 1) | ✓ | — |
| Information protection & compliance | ||
| Data loss prevention (DLP) | ✓ | — |
| eDiscovery & investigations | ✓ | — |
Capabilities group Microsoft's service plans into what your users actually get. Switch to Technical detail for the raw service plans.