Office 365 E3 vs Microsoft 365 E3
91 of 163 features differ. Differences are shown first, grouped by product area.
- Office 365 E3
- Microsoft 365 E3
Prices are US list prices per user/month with an annual commitment, verified November 1, 2026. Sources: Office 365 E3 (opens in a new tab), Microsoft 365 E3 (opens in a new tab).
Key differences
- 91 of 163 features differ, most in Windows & Cloud PC (36), Identity & access (19) and Threat protection (15).
- Microsoft 365 E3 costs $13.00 more per user/month than Office 365 E3: $39.00 per user/month against $26.00 per user/month.
- Microsoft 365 E3 includes 91 features Office 365 E3 does not, such as Intune Plan 2 capabilities, Intune Remote Help and Defender for Endpoint Plan 1.
- Every feature Office 365 E3 includes is also included in Microsoft 365 E3.
- 91 included only in Microsoft 365 E3
- Included
- Included at that level
- Add-on
- Partial or announced
- Unclear in the sources; verify before buying
- Not included
| Feature | Office 365 E3, $26.00 per user/month | Microsoft 365 E3, $39.00 per user/month |
|---|---|---|
| Suite editions, 2 differences | ||
| Enterprise Mobility + Security (EMS) edition | Not included | E3 |
| Windows edition | Not included | E3 |
| Apps & productivity, 2 differences | ||
| Power Automate attended desktop flows | Not included | Included |
| Office Professional Plus | Not included | Included |
| Identity & access, 19 differences | ||
| Entra ID Plan 1 | Not included | Included |
| Administrative units | Not included | Included |
| Application Proxy, including PingAccess | Not included | Included |
| Conditional Access | Not included | Included |
| Custom security attributes | Not included | Included |
| Microsoft Entra Connect Health | Not included | Included |
| External ID | Not included | Included |
| Microsoft Identity Manager | Not included | Included |
| Password protection | Not included | Included |
| Self-service group management | Not included | Included |
| Service level agreement (SLA) | Not included | Included |
| Shared account password rollover | Not included | Included |
| SMS sign-in | Not included | Included |
| Terms of use | Not included | Included |
| Third-party MFA integration | Not included | Included |
| Advanced security reports and alerts | Not included | Included |
| Dynamic groups | Not included | Included |
| Enterprise State Roaming | Not included | Included |
| Self-service password reset (SSPR) with on-premises writeback | Not included | Included |
| Threat protection, 15 differences | ||
| Advanced Threat Analytics (support ended) | Not included | Included |
| Configuration Manager Endpoint Protection | Not included | Included |
| Cloud app discovery | Not included | Included |
| Attack surface reduction (ASR) rules | Not included | Included |
| Defender Antivirus | Not included | Included |
| Defender for Endpoint Plan 1 | Not included | Included |
| Attack surface reduction (enhanced) | Not included | Included |
| Block at first sight | Not included | Included |
| Centralized management | Not included | Included |
| Cross-platform support | Not included | Included |
| Manual response actions | Not included | Included |
| Mobile threat defense | Not included | Included |
| Next-generation protection | Not included | Included |
| Tamper protection | Not included | Included |
| Web content filtering | Not included | Included |
| Data protection & compliance, 3 differences | ||
| Active Directory Rights Management Services (AD RMS) | Not included | Included |
| Azure Rights Management (Azure RMS) | Not included | Included |
| Information Protection | Not included | Included |
| Device management, 11 differences | ||
| Windows Autopilot | Not included | Included |
| Intune Plan 1 | Not included | Included |
| Mobile application management (MAM) | Not included | Included |
| Configuration Manager | Not included | Included |
| Mobile device management (MDM) | Not included | Included |
| Endpoint analytics | Not included | Included |
| Intune Plan 2 capabilities | Not included | Included |
| Intune Remote Help | Not included | Included |
| Microsoft Tunnel for mobile application management | Not included | Included |
| Firmware updates for specialty devices | Not included | Included |
| Intune Advanced Analytics | Not included | Included |
| Windows & Cloud PC, 36 differences | ||
| Always On VPN | Not included | Included |
| App Control for Business | Not included | Included |
| AppLocker | Not included | Included |
| App Assure | Not included | Included |
| Assigned Access | Not included | Included |
| BitLocker | Not included | Included |
| BitLocker to Go | Not included | Included |
| BranchCache | Not included | Included |
| Custom logon | Not included | Included |
| Custom shell | Not included | Included |
| Credential Guard | Not included | Included |
| Device Guard | Not included | Included |
| DirectAccess (deprecated) | Not included | Included |
| Domain join | Not included | Included |
| Microsoft Edge for Business | Not included | Included |
| Microsoft Entra join | Not included | Included |
| Keyboard Filter | Not included | Included |
| Windows Local Administrator Password Solution (LAPS) | Not included | Included |
| Long-Term Servicing Channel (LTSC) | Not included | Included |
| Manage by mobile device management (MDM) | Not included | Included |
| Microsoft Desktop Optimization Pack (MDOP, retiring) | Not included | Included |
| Persistent memory | Not included | Included |
| Resilient File System (ReFS) | Not included | Included |
| SMB Direct | Not included | Included |
| Unbranded Boot | Not included | Included |
| Unified Write Filter | Not included | Included |
| Universal Print | Not included | Included |
| Windows Autopatch | Not included | Included |
| Windows Conditional Access | Not included | Included |
| Windows Firewall | Not included | Included |
| Windows Hello for Business | Not included | Included |
| Windows Update for Business | Not included | Included |
| Windows virtualization rights | Not included | Included |
| Windows 11 support period | Not included | 36 months |
| Windows Quick Machine Recovery | Not included | Included |
| Windows post-quantum security APIs | Not included | Included |
| Licensing rights & services, 3 differences | ||
| Windows Server client access license (CAL) rights | Not included | Included |
| FastTrack | Not included | Included |
| Office server rights | Not included | Included |