| Feature | Microsoft 365 Business Standard ✕ | Microsoft 365 Business Premium ✕ | Microsoft 365 E3 ✕ |
|---|---|---|---|
| Key questions | |||
| Conditional access Entra ID Premium sign-in policies | — | P1 | P1 |
| Device management Intune for laptops and phones | Basic | ✓ | ✓ |
| Endpoint protection Microsoft Defender on devices | — | Business | Plan 1 |
| Email threat protection Defender for Office 365 | — | Plan 1 | Plan 1 |
| Data loss prevention Stop sensitive data leaving | — | ✓ | — |
| eDiscovery Legal hold and investigations | — | ✓ | — |
| Windows Enterprise Enterprise edition licence | — | — | ✓ |
| Email & collaboration | |||
| Email archiving & retention | — | ✓ | — |
| Files & content | |||
| Universal Print | — | ✓ | ✓ |
| Identity & access | |||
| Entra ID P1 (Conditional Access, SSO) | — | ✓ | ✓ |
| Multi-factor authentication | — | ✓ | ✓ |
| Devices & management | |||
| Intune (full device management) | — | ✓ | ✓ |
| Windows Enterprise | — | — | ✓ |
| Windows Update / Autopatch | — | ✓ | ✓ |
| Threat protection | |||
| Defender for Cloud Apps | — | ✓ | ✓ |
| Defender for Endpoint (Plan 1) | — | — | ✓ |
| Defender for Office 365 (Plan 1) | — | ✓ | ✓ |
| Information protection & compliance | |||
| Data loss prevention (DLP) | — | ✓ | — |
| eDiscovery & investigations | — | ✓ | — |
| Sensitivity labels & classification | — | — | ✓ |
| Business applications (Dynamics 365) | |||
| Dynamics 365 (business applications) | ✓ | ✓ | — |
Capabilities group Microsoft's service plans into what your users actually get. Switch to Technical detail for the raw service plans.