Compare Windows 365 Business and Enterprise

Windows 365 is available in two editions: Windows 365 Business and Windows 365 Enterprise.

General comparisons

Capability Windows 365 Business Windows 365 Enterprise
Domain Join Azure AD without Azure Virtual Network (VNet) support. Hybrid Azure AD with VNet support.
For other domain support, see In development for Windows 365 Enterprise.

Purchasing and licensing comparisons

Capability Windows 365 Business Windows 365 Enterprise
Purchase channels Web direct, self-service, Cloud Solution Provider (CSP). Web direct, Enterprise Agreements (EA), CSP.
License assignment Microsoft 365 Admin Center or the Azure AD portal. Microsoft 365 Admin Center.
Licensing requirements No licensing pre-requirements to buy and deploy Windows 365 Business. Other features (like device management) can be used if users are licensed for Microsoft Endpoint Management. Each user must be licensed for Windows 10 or 11 Enterprise (when available), Microsoft Endpoint Manager, and Azure AD P1.
Networking costs Outbound data/month is based on the RAM of the Cloud PC:
- 2 GB RAM = 12 GB outbound data
- 4 or 8 GB RAM = 20 GB outbound data
- 16 GB RAM = 40 GB outbound data
- 32 GB RAM = 70 GB outbound data
Data bandwidth may be restricted when these levels are exceeded.
Networking goes through the customer's Azure VNet and isn't included in the license. Azure bandwidth pricing applies for these network usage costs.
Seat limits Capped to 300 seats per tenant. Commercial Licensing Terms No seat cap per tenant. Commercial Licensing Terms

Administrative comparisons

Capability Windows 365 Business Windows 365 Enterprise
Provisioning Provisioning is simplified and uses default configurations.
Cloud PCs are automatically provisioned with a standard image after a Cloud PC license is assigned.
Provisioning is configurable and customizable to the needs of the organization.
Admins set up the VNet, configure user permissions (local admin or not), and assign the policy to an Azure AD group.
Cloud PCs are then provisioned by using standard gallery images or custom images (admin choice).
Policy management Not Supported. Group Policy Objects (GPO) and Intune MDM are supported.
Application deployment Supported only if you have Intune license. Supported.
Windows updates Default Windows Update for Business settings are configured for users. With an Intune license these can be edited. Can be managed by using Microsoft Endpoint Manager.
Device management Device management is limited to assigning and unassigning of Cloud PC licenses in the Microsoft Admin Center. Some device management is possible in Microsoft Endpoint Manager if you have an Intune license but Cloud PCs will not be visible in the Windows 365 blade. Microsoft Endpoint Manager admin center options, including image management, link and access on-premises resources, granular targeting of policies, resizing Cloud PCs, other user experience settings, and all the policy-based management options available to physical devices.
Monitoring Not supported. Endpoint Analytics reporting and monitoring, service health, and operational health alerts.
Troubleshooting Not supported Microsoft Endpoint Manager troubleshooting including the Troubleshooting blade, device management actions, and reprovisioning of Cloud PCs to their initial state.
Partner/programmatic access Not supported Partners can manage Cloud PCs through Microsoft 365 Lighthouse or restful web APIs (Graph) to support Managed Service Provider tooling for up to 300 seats.

End user comparisons

Capability Windows 365 Business Windows 365 Enterprise
Management Users can restart, reset, rename, and troubleshoot their Cloud PCs on the Windows 365 homepage. Users can restart, rename, and troubleshoot their Cloud PCs on the Windows 365 homepage.
Role By default, each user is assigned the Local Administrator role on their Cloud PC. This supports the native installation of Win32 apps. This can't be changed by the Global Administrator. By default, each user i assigned a standard user role on their Cloud PC. This can be changed by the admin in the Microsoft Endpoint Manager admin center.
Access Users can access their Cloud PC at windows365.microsoft.com or by using Microsoft Remote Desktop. Users can access their Cloud PC at windows365.microsoft.com or by using Microsoft Remote Desktop.
Platform Any platform that supports Microsoft Remote Desktop clients. Learn more. Any platform that supports Microsoft Remote Desktop clients. Learn more.

Security comparisons

Capability Windows 365 Business Windows 365 Enterprise
Conditional Access Conditional Access policies can be deployed only by using Azure AD with an Azure AD P1 license. Conditional Access policies can be deployed by using the Microsoft Endpoint Manager admin center or Azure AD.
Per-user multi-factor authentication (MFA) Only MFA using Azure AD Conditional Access is supported. Legacy per-user MFA is not supported. Supported.
Security baselines Not supported. Dedicated Security Baselines can be edited and deployed by using Microsoft Endpoint Manager.
Microsoft Defender for Endpoint Supported if the customer separately has the requisite E5 license. Integration with Defender for Endpoint. If the customer has an E5 license, all Cloud PCs will respond to Defender for Endpoint policies and show up in MDE dashboards.

Support comparisons

Capability Windows 365 Business Windows 365 Enterprise
Support channels Support tickets can be filed through the Microsoft 365 Admin Center. Support tickets can be filed through Microsoft Endpoint Manager (recommended) and the Microsoft 365 Admin Center.

Next steps

For more information about Windows 365 Enterprise, see What is Windows 365 Enterprise?.

For more information about Windows 365 Business, see Getting started with Windows 365 Business and Cloud PCs.