Microsoft 365 Business Service Description

Microsoft 365 Business is an integrated solution bringing together the best-in-class productivity of Office 365 with advanced security and device management to help safeguard your business from advanced threats. This service description describes the plan options and features. For more information about Office 365, see the Office 365 Service Descriptions.

Feature availability across Office 365 Business Premium and Microsoft 365 Business plans

Microsoft 365 Business essentially includes all the features available in Office 365 Business Premium along with additional Office 365 security features.

Plan options
Office 365 Business Premium
Microsoft 365 Business
Office 365 Platform
Yes
Yes
Exchange Online
Yes1
Yes1
SharePoint Online
Yes
Yes
OneDrive for Business
Yes
Yes
Microsoft Teams
Yes
Yes
Office for the web
Yes
Yes
Office applications
Yes
Yes
Yammer Enterprise
Yes
Yes
Microsoft Bookings
Yes
Yes
Microsoft Flow
Yes
Yes
Microsoft Forms
Yes
Yes
Microsoft Planner
Yes
Yes
Microsoft PowerApps
Yes
Yes
Microsoft StaffHub
Yes
Yes
Microsoft Stream
Yes6
Yes6
Office 365 administration
Office 365 Business Premium
Microsoft 365 Business
Azure AD Connect sync tool
Yes
Yes
Shared computer activation
No
Yes
Message policy and compliance
Office 365 Business Premium
Microsoft 365 Business
Long-term archiving of Exchange Online-based mailboxes
No
Yes3
Azure Information Protection Plan 1 No
Yes2
Office 365 Message Encryption
No
Yes2
In-Place Hold and Litigation Hold
No
Yes3
In-Place eDiscovery
Yes
Yes
Transport rules
Yes
Yes
Data loss prevention
No
Yes
Privacy, security, and transparency
Office 365 Business Premium
Microsoft 365 Business
Built-in anti-spam protection
Yes
Yes
Built-in anti-malware protection
Yes
Yes
Office 365 Advanced Threat Protection Plan 1
No
Yes7
Secure Score4
Yes
Yes
Office 365 Advanced Threat Protection Plan 2
No
No
Identity and access management
Microsoft 365 Business includes select Azure AD Premium P1 (AADP P1) features. Does not include the entirety of AADP1.8
Office 365 Business Premium
Microsoft 365 Business
Enterprise Mobility + Security E3
Azure Multi-Factor Authentication (MFA)
No
Yes
Yes
Administrative units
No
No
Yes
Cloud app discovery
No
No
Yes
Dynamic groups
No
No
Yes
Self-service password reset for cloud identities
Yes
Yes
Yes
Self-service password reset with on-premises AD write-back
No
Yes
Yes
Device objects two-way synchronization between on-premises directories and Azure AD (device write-back)
No
No
Yes
Conditional access (based on group, location, or device state)
No
Yes
Yes
Company branding (logon pages/access panel customization)
Yes
Yes
Yes
Application proxy
No
No
Yes
Microsoft Identity Manager (MIM) user CAL
No
No
Yes
Connect Health
No
No
Yes
SLA 99.9%
Yes
Yes
Yes
Advanced Threat Analytics
No
No
Yes
Device and application management
Microsoft 365 Business includes full Intune capabilities for iOS, Android, Mac OS, and other cross-platform device management.9
Office 365 Business Premium
Microsoft 365 Business
Enterprise Mobility + Security E3
Intune Mobile Device Management (MDM) for PCs, Macs, and mobile devices5
Yes
Yes
Yes
Mobile Device Management (MDM) auto-enrollment
No
Yes
Yes
Intune Mobile Application Management (MAM) for Office apps and LOB apps17
No
Yes
Yes
Windows update management, Defender, Firewall policies5
No
Yes
Yes
Data protection - selective wipe
Yes
Yes
Yes
Security group (SG) targeting for policies
No
Yes
Yes
Install Office apps on enrolled Windows 10 devices
No
Yes
Yes
Windows Defender configuration
No
Yes
Yes
Deploying device profiles and security configuration5
No
Yes
Yes
Enterprise State Roaming for Windows 10 with Azure AD join
No
Yes
Yes
Self-service BitLocker recovery
No
Yes
Yes
Windows Virtual Desktop
No
Yes
Yes
Windows 10 Pro management
If you have devices that are licensed for Windows 7 and 8.1 Professional, Microsoft 365 Business provides an upgrade to Windows 10 Pro.10
Microsoft 365 Business
Simplified deployment with Windows AutoPilot
Yes
Subscription activation
Yes
Organizational control of device screen on idle
Yes
Organizational control of user access to apps from Microsoft Store
Yes
Organizational control of user access to Cortana
Yes
Organizational control of Windows tips and advertising from Microsoft
Yes
Windows 10 devices kept up-to-date automatically
Yes
Windows 10 Security
Microsoft 365 Business
Protect PCs from viruses and other threats using Windows Defender Antivirus
Yes
Protect PCs from web-based threats in Microsoft Edge
Yes
Use rules that reduce the attack surface of devices
Yes
Protect folders from threats such as ransomware
Yes
Help protect files and folders on PCs from unauthorized access with Bitlocker
Yes

Notes

1 Includes Exchange Online Plan 1.
2 Azure Information Protection (AIP) enables the supported Information Rights Management (IRM) features. AIP Plan 1 is included in Microsoft 365 Business.
3 Microsoft 365 Business includes Exchange Online Archiving subscription. Each Exchange Online Archiving subscriber initially receives 100 GB of storage in the archive mailbox. When auto-expanding archiving is turned on, additional storage is automatically added when the 100 GB storage capacity is reached. For more information, see Overview of unlimited archiving in Office 365.
4 Available at https://securescore.office.com. Requires admin permissions. For more information, see Introducing the Office 365 Secure Score.
5 Simplified Windows 10 device management built into the Microsoft 365 admin center. Intune management capabilities of iOS, Android, macOS, and other cross-platform device management built into the Device management admin center, also licensed for use with Microsoft 365 Business. Third-party apps and configuration of things like WiFi profiles and VPN certificates can also be managed in the Device management admin center.
6 This plan comes with Microsoft Stream Plan 2, which includes Video portal, Speech to text transcription, Deep Search, and Face Detection.
7 Microsoft 365 comes with Office 365 Advanced Threat Protection Plan 1. For more information, see Microsoft 365 Business security and compliance features.
8 Microsoft 365 Business includes select Azure AD Premium P1 features, such as self-service password reset with AD write-back, Azure Multi-Factor Authentication (MFA), and Conditional Access. It does not include the entirety of Azure AD Premium P1.
9 Microsoft 365 Business subscribers are licensed to use full Intune capabilities for iOS, Android, MacOS, and other cross-platform device management. Features not available in the admin center in Microsoft 365 Business, like third-party app management and configuration of WiFi profiles, VPN certificates, etc., can be managed in the full Intune console.
10 If you have devices that are licensed for Windows 7 and 8.1 Professional, Microsoft 365 Business provides an upgrade to Windows 10 Pro. With Microsoft 365 Business you not only get Microsoft Defender security features that come enabled in Windows Pro, you also get access to premium features like network protection for web-based threats and host intrusion prevention rules to mitigate ransomware. When you set up your Microsoft 365 Business tenant, you select app protection, and device configuration settings. These settings determine the policies that are applied automatically to devices when they join Azure Active Directory.