Microsoft Intune: How to Choose the Right Licensing Option

In this blog post, we will explain the different licensing options for Intune and how to choose the one that suits your needs and budget. 

Licensing options for Intune 

There are two main licensing options for Intune: user-based and device-based. 

User-based licensing: This option allows you to license Intune per user, meaning that each user can enroll and manage up to five devices of any type, such as Windows, iOS, Android, or macOS. 

Device-based licensing: This option allows you to license Intune per device, meaning that each device can be enrolled and managed by one or more users, but only for Windows devices. 

Both licensing options include the following features: 

• Device management: Enroll, configure, and update your devices, and apply security and update policies. 

• App management: Deploy and manage your apps across your devices, and control app access and data sharing. 

• Data protection: Protect your data with encryption, conditional access, multi-factor authentication, and compliance policies. 

• Monitoring and reporting: Use the monitoring and reporting tools to track and troubleshoot the device, app, and data status and issues. 

The main difference between the two licensing options is the number and type of devices that you can enroll and manage. User-based licensing allows you to assign a license to a user, who can then enroll and use up to five devices of any platform. Device-based licensing allows you to assign a license to a specific device, regardless of who uses it. Device-based licensing is only available for Windows 10 Enterprise and Education devices. 

It is available as part of various Microsoft licensing packages or suites, each designed to meet different organizational needs. Below is an overview of the licensing options that include Microsoft Intune: 

1. Microsoft Three-Six-Five Enterprise Microsoft Three-Six-Five Enterprise is a comprehensive suite that includes Office Three-Six-Five, Windows 10 Enterprise, and Enterprise Mobility + Security (EMS), which encompasses Microsoft Intune. It is designed for large organizations and offers advanced security, compliance, and device management capabilities. 

Some of the licenses that fall under these categories are: 

• Microsoft Three-Six-Five E3 

• Microsoft Three-Six-Five E5 

• Microsoft Three-Six-Five EMS E3 

• Microsoft Three-Six-Five EMS E5 

2. Microsoft Three-Six-Five Business Microsoft Three-Six-Five Business is tailored for small to medium-sized businesses and includes Office Three-Six-Five, Windows 10 Business, and best-in-class security features through EMS, including Microsoft Intune. 

• Microsoft Three-Six-Five Business Premium (Includes Microsoft Intune) 

• Microsoft Three-Six-Five Business Standard (does not include Microsoft Intune) 

• Microsoft Three-Six-Five Business Basic (does not include Microsoft Intune) 

3. Enterprise Mobility + Security (EMS) EMS is a standalone suite that provides an identity-driven security solution, helping to protect your organization's data. It includes services such as Azure Active Directory, Azure Information Protection, and Microsoft Intune.  

• Microsoft Three-Six-Five EMS E3 

• Microsoft Three-Six-Five EMS E5 

4. Microsoft Three-Six-Five Education Microsoft Three-Six-Five Education is designed for educational institutions and includes Office Three-Six-Five, Windows 10 Education, and EMS, which provides Microsoft Intune for managing devices and applications across the campus.  

Some of the licenses that fall under these categories are: 

• Microsoft Three-Six-Five A3 

• Microsoft Three-Six-Five A5 

4. Standalones. You can purchase Microsoft Intune as a standalone license or as an add-on to other Microsoft Three-Six-Five plans. CSP Partners can offer the following Microsoft Intune standalone licenses to their customers: 

• Microsoft Intune Device 

• Microsoft Intune 

• Microsoft Endpoint Manager 

Microsoft Endpoint Manager is a unified solution that combines the functionality of Microsoft Intune and System Center Configuration Manager (SCCM). It allows organizations to manage their devices, apps, policies, and security across different platforms, such as Windows, iOS, Android, macOS, and Linux.  

Microsoft Endpoint Manager also integrates with other cloud services, such as Azure Active Directory, Microsoft Defender for Endpoint, and Microsoft Three-Six-Five Apps. It is designed to simplify and modernize the management of endpoints, while still providing the flexibility and control that IT professionals need. It offers a cloud-based console that can be accessed from any device and location, as well as a hybrid option that leverages the existing SCCM infrastructure.  

Please note - Microsoft Endpoint Manager is not only a replacement for SCCM but also an enhancement that provides more features and benefits, such as: 

• Zero-touch provisioning and deployment of devices using Windows Autopilot and Microsoft Endpoint Manager enrollment status page 

• Granular control over updates and patches using Windows Update for Business and Microsoft Endpoint Manager update rings 

• Enhanced security and compliance using Microsoft Endpoint Manager security baselines and conditional access policies 

• Seamless app delivery and management using Microsoft Endpoint Manager app catalogs and app protection policies 

• Visibility and insights into the device health and performance using Microsoft Endpoint Manager analytics and reports 

Comparison Table for Intune Inclusion: 

If you want to empower your customers with the best tools and security, you need to consider Intune as part of your Microsoft Three-Six-Five solutions offering. To learn more about how Intune can benefit your customers and how to license it for your Microsoft Three-Six-Five plans, contact the 4 sight Modern Work team atThis email address is being protected from spambots. You need JavaScript enabled to view it.. We will help you find the best solution for your needs and budget.