Microsoft 365 商业高级版服务说明Microsoft 365 Business Premium service description

Microsoft 365 商业高级版是一个集成的解决方案,将 Microsoft 365 与高级安全性和设备管理结合在一起,从而帮助保护您的业务不受高级威胁。Microsoft 365 Business Premium is an integrated solution bringing together the best-in-class productivity of Microsoft 365 with advanced security and device management to help safeguard your business from advanced threats. 此服务说明介绍了计划选项和功能。This service description describes the plan options and features. 有关 Office 365 的详细信息,请参阅 Microsoft 365 和 Office 365 服务说明For more information about Office 365, see Microsoft 365 and Office 365 service descriptions.

跨 Microsoft 365 商业标准和 Microsoft 365 商业高级版计划的功能可用性Feature availability across Microsoft 365 Business Standard and Microsoft 365 Business Premium plans

Microsoft 365 商业高级版基本上包括 Microsoft 365 商业标准中提供的所有功能以及其他 Microsoft 安全功能。Microsoft 365 Business Premium includes essentially all the features available in Microsoft 365 Business Standard along with additional Microsoft security features.

计划选项Plan options Microsoft 365 商业标准版Microsoft 365 Business Standard Microsoft 365 商业高级版Microsoft 365 Business Premium
Office 365 平台Office 365 platform
Yes
Yes
Exchange OnlineExchange Online
1Yes1
1Yes1
SharePoint OnlineSharePoint Online
Yes
Yes
OneDrive for BusinessOneDrive for Business
Yes
Yes
Microsoft TeamsMicrosoft Teams
Yes
Yes
Office 网页版Office for the web
Yes
Yes
Office 应用程序Office applications
Yes
Yes
Yammer EnterpriseYammer Enterprise
Yes
Yes
Microsoft BookingsMicrosoft Bookings
Yes
Yes
Microsoft Power AutomateMicrosoft Power Automate
Yes
Yes
Microsoft FormsMicrosoft Forms
Yes
Yes
Microsoft PlannerMicrosoft Planner
Yes
Yes
Microsoft PowerAppsMicrosoft PowerApps
Yes
Yes
Microsoft StaffHubMicrosoft StaffHub
Yes
Yes
Microsoft StreamMicrosoft Stream
6Yes6
6Yes6
Microsoft 365 管理Microsoft 365 administration
Microsoft 365 商业标准版Microsoft 365 Business Standard
Microsoft 365 商业高级版Microsoft 365 Business Premium
Azure AD Connect 同步工具Azure AD Connect sync tool
Yes
Yes
共享计算机激活Shared computer activation
No
Yes
邮件策略和合规性Message policy and compliance
Microsoft 365 商业标准版Microsoft 365 Business Standard
Microsoft 365 商业高级版Microsoft 365 Business Premium
基于 Exchange Online 的邮箱的长期存档Long-term archiving of Exchange Online-based mailboxes
No
3Yes3
Azure 信息保护计划1Azure Information Protection Plan 1 No
2Yes2
Office 365 邮件加密Office 365 Message Encryption
No
2Yes2
就地保留和诉讼保留In-Place Hold and Litigation Hold
No
3Yes3
就地电子数据展示In-Place eDiscovery
Yes
Yes
Transport rulesTransport rules
Yes
Yes
数据丢失防护Data loss prevention
No
Yes
隐私、安全性和透明度Privacy, security, and transparency
Microsoft 365 商业标准版Microsoft 365 Business Standard
Microsoft 365 商业高级版Microsoft 365 Business Premium
内置反垃圾邮件保护Built-in anti-spam protection
Yes
Yes
内置反恶意软件保护Built-in anti-malware protection
Yes
Yes
Office 365 高级威胁防护计划1Office 365 Advanced Threat Protection Plan 1
No
7Yes7
安全功能分数4Secure Score4
Yes
Yes
Office 365 高级威胁防护(计划 2)Office 365 Advanced Threat Protection Plan 2
No
No
Microsoft 365 商业高级版客户可以使用 Azure AD Premium P1。Azure AD Premium P1 is available to Microsoft 365 Business Premium customers.
Microsoft 365 商业标准版Microsoft 365 Business Standard
Microsoft 365 商业高级版Microsoft 365 Business Premium
企业移动性 + 安全 E3Enterprise Mobility + Security E3
Azure 多重身份验证 (MFA)Azure Multi-Factor Authentication (MFA)
No
Yes
Yes
管理单元Administrative units
No
Yes
Yes
云应用发现Cloud app discovery
No
Yes
Yes
动态组Dynamic groups
No
Yes
Yes
云标识的自助服务密码重置Self-service password reset for cloud identities
Yes
Yes
Yes
使用本地 AD 写回的自助服务密码重置Self-service password reset with on-premises AD write-back
No
9Yes9
Yes
设备对象本地目录与 Azure AD 之间的双向同步 (设备写回) Device objects two-way synchronization between on-premises directories and Azure AD (device write-back)
No
9Yes9
Yes
基于组、位置或设备状态的条件访问 () Conditional access (based on group, location, or device state)
No
9Yes9
Yes
公司品牌 (登录页面/访问面板自定义) Company branding (logon pages/access panel customization)
Yes
Yes
Yes
应用程序代理Application proxy
No
9Yes9
Yes
Microsoft Identity Manager (MIM) user CALMicrosoft Identity Manager (MIM) user CAL
No
9Yes9
Yes
Connect HealthConnect Health
No
9Yes9
Yes
SLA 99.9%SLA 99.9%
Yes
Yes
Yes
设备和应用程序管理Device and application management
Microsoft 365 商业高级版包括适用于 iOS、Android、Mac OS 和其他跨平台设备管理的完整 Intune 功能。8Microsoft 365 Business Premium includes full Intune capabilities for iOS, Android, Mac OS, and other cross-platform device management.8
Microsoft 365 商业标准版Microsoft 365 Business Standard
Microsoft 365 商业高级版Microsoft 365 Business Premium
Intune 移动设备管理 (适用于电脑、Mac 和移动设备的 MDM) 5Intune Mobile Device Management (MDM) for PCs, Macs, and mobile devices5
No
Yes
(MDM) 自动注册的移动设备管理Mobile Device Management (MDM) auto-enrollment
No
Yes
适用于 Office 应用和 LOB 应用的 Intune 移动应用程序管理 (MAM) Intune Mobile Application Management (MAM) for Office apps and LOB apps
No
Yes
Windows update management、Defender、防火墙策略5Windows update management, Defender, Firewall policies5
No
Yes
数据保护-选择性擦除Data protection - selective wipe
Yes
Yes
为策略 (SG) 目标的安全组Security group (SG) targeting for policies
No
Yes
在已注册的 Windows 10 设备上安装 Office 应用Install Office apps on enrolled Windows 10 devices
No
Yes
Windows Defender 配置Windows Defender configuration
No
Yes
部署设备配置文件和安全配置5Deploying device profiles and security configuration5
No
Yes
使用 Azure AD 加入的 Windows 10 企业版状态漫游Enterprise State Roaming for Windows 10 with Azure AD join
No
Yes
自助服务 BitLocker 恢复Self-service BitLocker recovery
No
Yes
Windows 虚拟桌面Windows Virtual Desktop
No
Yes
Windows 10 专业版管理Windows 10 Pro management
如果你有适用于 Windows 7 和8.1 专业人员的设备,Microsoft 365 商业高级版将提供升级到 Windows 10 专业版的许可证。If you have devices that are licensed for Windows 7 and 8.1 Professional, Microsoft 365 Business Premium provides an upgrade to Windows 10 Pro.9
Microsoft 365 商业高级版Microsoft 365 Business Premium
使用 Windows AutoPilot 进行简化部署Simplified deployment with Windows AutoPilot
Yes
订阅激活Subscription activation
Yes
空闲时设备屏幕的组织控制Organizational control of device screen on idle
Yes
对来自 Microsoft Store 的应用程序的用户访问的组织控制Organizational control of user access to apps from Microsoft Store
Yes
对 Cortana 的用户访问的组织控制Organizational control of user access to Cortana
Yes
来自 Microsoft 的 Windows 提示和广告的组织控制Organizational control of Windows tips and advertising from Microsoft
Yes
Windows 10 设备自动保持最新状态Windows 10 devices kept up-to-date automatically
Yes
Windows 10 安全Windows 10 Security
Microsoft 365 商业高级版Microsoft 365 Business Premium
使用 Windows Defender 防病毒保护电脑免受病毒和其他威胁Protect PCs from viruses and other threats using Windows Defender Antivirus
Yes
在 Microsoft Edge 中保护电脑免受基于 web 的威胁Protect PCs from web-based threats in Microsoft Edge
Yes
使用减少设备攻击面的规则Use rules that reduce the attack surface of devices
Yes
保护文件夹免受勒索软件等威胁Protect folders from threats such as ransomware
Yes
帮助保护电脑上的文件和文件夹不受 Bitlocker 的未经授权的访问Help protect files and folders on PCs from unauthorized access with Bitlocker
Yes

注释Notes

1 包括 Exchange Online 计划1。1 Includes Exchange Online Plan 1.
2 Azure 信息保护 (AIP) 启用受支持的信息权限管理 (IRM) 功能。2 Azure Information Protection (AIP) enables the supported Information Rights Management (IRM) features. AIP Plan 1 包含在 Microsoft 365 商业高级版中。AIP Plan 1 is included in Microsoft 365 Business Premium.
3 Microsoft 365 商业高级版包括 Exchange Online 存档订阅。3 Microsoft 365 Business Premium includes Exchange Online Archiving subscription. 每个 Exchange Online Archiving 订阅者最初都会获得 100 GB 的存档邮箱存储空间。Each Exchange Online Archiving subscriber initially receives 100 GB of storage in the archive mailbox. 启用自动扩展存档后,只要达到 100 GB 存储容量,就会自动添加额外存储空间。When auto-expanding archiving is turned on, additional storage is automatically added when the 100 GB storage capacity is reached. 有关详细信息,请参阅 无限存档概述For more information, see Overview of unlimited archiving.
4 适用于 https://securescore.office.com4 Available at https://securescore.office.com. 必须拥有管理员权限。Requires admin permissions. 有关详细信息,请参阅 Microsoft 安全分数For more information, see Microsoft Secure Score.
5 简化了 Windows 10 设备管理,内置在 Microsoft 365 管理中心。5 Simplified Windows 10 device management built into the Microsoft 365 admin center. "设备管理" 管理中心中内置的 iOS、Android、macOS 和其他跨平台设备管理的 Intune 管理功能,也授权与 Microsoft 365 商业高级版配合使用。Intune management capabilities of iOS, Android, macOS, and other cross-platform device management built into the Device management admin center, also licensed for use with Microsoft 365 Business Premium. 此外,还可以在设备管理管理中心内管理与 WiFi 配置文件和 VPN 证书等内容的第三方应用程序和配置。Third-party apps and configuration of things like WiFi profiles and VPN certificates can also be managed in the Device management admin center.
6 此计划附带 Microsoft Stream plan 2,其中包括视频门户、语音到文本对话、深度搜索和人脸检测。6 This plan comes with Microsoft Stream Plan 2, which includes Video portal, Speech to text transcription, Deep Search, and Face Detection.
7 Microsoft 365 提供了 Office 365 高级威胁防护计划1。7 Microsoft 365 comes with Office 365 Advanced Threat Protection Plan 1. 有关详细信息,请参阅 Microsoft 365 商业高级安全性和合规性功能For more information, see Microsoft 365 Business Premium security and compliance features.
8 Microsoft 365 商业高级订阅者许可使用适用于 IOS、Android、MacOS 和其他跨平台设备管理的完整 Intune 功能。8 Microsoft 365 Business Premium subscribers are licensed to use full Intune capabilities for iOS, Android, MacOS, and other cross-platform device management. 在 Microsoft 365 商业高级版的管理中心中不可用的功能,如第三方应用管理和 WiFi 配置文件的配置、VPN 证书等。可以在完整 Intune 控制台中管理。Features not available in the admin center in Microsoft 365 Business Premium, like third-party app management and configuration of WiFi profiles, VPN certificates, etc., can be managed in the full Intune console.
9 如果你有适用于 windows 7 和8.1 专业人员的设备,Microsoft 365 商业高级版将提供升级到 Windows 10 专业版的许可证。9 If you have devices that are licensed for Windows 7 and 8.1 Professional, Microsoft 365 Business Premium provides an upgrade to Windows 10 Pro. 但是,此许可证不包含 windows 10 专业版的 Windows 7.1 或8家庭版。However, this license does not cover Windows 7.1 or 8 Home Edition with Windows 10 Pro. 使用 Microsoft 365 商业高级版不仅可以获取 Windows Pro 中已启用的 Microsoft Defender 安全功能,还可以访问高级功能(如基于 web 的威胁的网络保护)以及主机入侵防护规则来缓解勒索软件。With Microsoft 365 Business Premium you not only get Microsoft Defender security features that come enabled in Windows Pro, you also get access to premium features like network protection for web-based threats and host intrusion prevention rules to mitigate ransomware. 设置 Microsoft 365 商业高级版帐户时,请选择 "应用保护" 和 "设备配置设置"。When you set up your Microsoft 365 Business Premium account, you select app protection, and device configuration settings. 这些设置决定了在设备加入 Azure Active Directory 时自动应用于设备的策略。These settings determine the policies that are applied automatically to devices when they join Azure Active Directory.