Key differences
- 137 of 242 features differ, most in Threat protection (40), Windows & Cloud PC (36) and Identity & access (26).
- Microsoft 365 E5 costs $19.00 more per user/month than Office 365 E5: $60.00 per user/month against $41.00 per user/month.
- Microsoft 365 E5 includes 137 features Office 365 E5 does not, such as Microsoft Security Copilot, Defender for Endpoint Plan 2 and Entra ID Plan 2.
- Every feature Office 365 E5 includes is also included in Microsoft 365 E5.
- 137 included only in Microsoft 365 E5
- ✔Included
- Plan 2Included at that level
- +Add-on
- ~Partial or announced
- ?Unclear in the sources; verify before buying
- —Not included
Feature coverage for Office 365 E5, Microsoft 365 E5, grouped by product area| Feature | Office 365 E5$41.00/user/mo, $41.00 per user/month | Microsoft 365 E5$60.00/user/mo, $60.00 per user/month |
|---|
| Suite editions, 2 differences |
|---|
| Enterprise Mobility + Security (EMS) edition | —Not included | E5 |
|---|
| Windows edition | —Not included | E5 |
|---|
| Copilot & agents, 1 difference |
|---|
| Microsoft Security Copilot | —Not included | ✔Included |
|---|
| Apps & productivity, 2 differences |
|---|
| Power Automate attended desktop flows | —Not included | ✔Included |
|---|
| Office Professional Plus | —Not included | ✔Included |
|---|
| Teams, meetings & calling, 5 differences |
|---|
| Teams Phone System | —Not included | ✔Included |
|---|
| Cloud voicemail | —Not included | ✔Included |
|---|
| Auto attendants | —Not included | ✔Included |
|---|
| Call queues | —Not included | ✔Included |
|---|
| Direct Routing (bring your own carrier) | —Not included | ✔Included |
|---|
| Identity & access, 26 differences |
|---|
| Entra ID Plan 2 | —Not included | ✔Included |
|---|
| Access reviews | —Not included | ✔Included |
|---|
| Entitlement management (basic) | —Not included | ✔Included |
|---|
| Entra ID Protection | —Not included | ✔Included |
|---|
| MFA registration policy | —Not included | ✔Included |
|---|
| Privileged Identity Management (PIM) | —Not included | ✔Included |
|---|
| Risk-based Conditional Access | —Not included | ✔Included |
|---|
| Entra ID Plan 1 | —Not included | ✔Included |
|---|
| Administrative units | —Not included | ✔Included |
|---|
| Application Proxy, including PingAccess | —Not included | ✔Included |
|---|
| Conditional Access | —Not included | ✔Included |
|---|
| Custom security attributes | —Not included | ✔Included |
|---|
| Microsoft Entra Connect Health | —Not included | ✔Included |
|---|
| External ID | —Not included | ✔Included |
|---|
| Microsoft Identity Manager | —Not included | ✔Included |
|---|
| Password protection | —Not included | ✔Included |
|---|
| Self-service group management | —Not included | ✔Included |
|---|
| Service level agreement (SLA) | —Not included | ✔Included |
|---|
| Shared account password rollover | —Not included | ✔Included |
|---|
| SMS sign-in | —Not included | ✔Included |
|---|
| Terms of use | —Not included | ✔Included |
|---|
| Third-party MFA integration | —Not included | ✔Included |
|---|
| Advanced security reports and alerts | —Not included | ✔Included |
|---|
| Dynamic groups | —Not included | ✔Included |
|---|
| Enterprise State Roaming | —Not included | ✔Included |
|---|
| Self-service password reset (SSPR) with on-premises writeback | —Not included | ✔Included |
|---|
| Threat protection, 40 differences |
|---|
| Advanced Threat Analytics (support ended) | —Not included | ✔Included |
|---|
| App governance | —Not included | ✔Included |
|---|
| Configuration Manager Endpoint Protection | —Not included | ✔Included |
|---|
| Defender for Cloud Apps | —Not included | ✔Included |
|---|
| Defender for Identity | —Not included | ✔Included |
|---|
| Cloud app discovery | —Not included | ✔Included |
|---|
| Attack surface reduction (ASR) rules | —Not included | ✔Included |
|---|
| Defender Antivirus | —Not included | ✔Included |
|---|
| Defender for Endpoint Plan 2 | —Not included | ✔Included |
|---|
| Advanced hunting | —Not included | ✔Included |
|---|
| Automated investigations | —Not included | ✔Included |
|---|
| Defender for Cloud Apps integration | —Not included | ✔Included |
|---|
| Endpoint attack notifications (suspended) | —Not included | ✔Included |
|---|
| Endpoint detection and response (EDR) | —Not included | ✔Included |
|---|
| Evaluation lab | —Not included | ✔Included |
|---|
| Threat analytics | —Not included | ✔Included |
|---|
| Six months of searchable data | —Not included | ✔Included |
|---|
| Defender Vulnerability Management (core) | —Not included | ✔Included |
|---|
| Configuration assessment | —Not included | ✔Included |
|---|
| Continuous monitoring | —Not included | ✔Included |
|---|
| Device discovery | —Not included | ✔Included |
|---|
| Device inventory | —Not included | ✔Included |
|---|
| Remediation tracking | —Not included | ✔Included |
|---|
| Risk-based prioritization | —Not included | ✔Included |
|---|
| Software inventory | —Not included | ✔Included |
|---|
| Software usage insights | —Not included | ✔Included |
|---|
| Vulnerability assessment | —Not included | ✔Included |
|---|
| Defender for Endpoint Plan 1 | —Not included | ✔Included |
|---|
| Attack surface reduction (enhanced) | —Not included | ✔Included |
|---|
| Block at first sight | —Not included | ✔Included |
|---|
| Centralized management | —Not included | ✔Included |
|---|
| Cross-platform support | —Not included | ✔Included |
|---|
| Manual response actions | —Not included | ✔Included |
|---|
| Mobile threat defense | —Not included | ✔Included |
|---|
| Next-generation protection | —Not included | ✔Included |
|---|
| Tamper protection | —Not included | ✔Included |
|---|
| Web content filtering | —Not included | ✔Included |
|---|
| Defender for IoT, enterprise IoT (5 devices per license) | —Not included | ✔Included |
|---|
| Safe Documents | —Not included | ✔Included |
|---|
| Microsoft Sentinel benefit | —Not included | ✔Included |
|---|
| Data protection & compliance, 8 differences |
|---|
| Active Directory Rights Management Services (AD RMS) | —Not included | ✔Included |
|---|
| Azure Rights Management (Azure RMS) | —Not included | ✔Included |
|---|
| Information Protection | —Not included | ✔Included |
|---|
| Rules-based classification (client and scanner) | —Not included | ✔Included |
|---|
| Advanced analytics (Microsoft Purview) | —Not included | ✔Included |
|---|
| Endpoint data loss prevention (DLP) | —Not included | ✔Included |
|---|
| Insider risk management | —Not included | ✔Included |
|---|
| Trainable classifiers | —Not included | ✔Included |
|---|
| Device management, 14 differences |
|---|
| Windows Autopilot | —Not included | ✔Included |
|---|
| Intune Plan 1 | —Not included | ✔Included |
|---|
| Mobile application management (MAM) | —Not included | ✔Included |
|---|
| Configuration Manager | —Not included | ✔Included |
|---|
| Mobile device management (MDM) | —Not included | ✔Included |
|---|
| Endpoint analytics | —Not included | ✔Included |
|---|
| Intune Plan 2 capabilities | —Not included | ✔Included |
|---|
| Intune Endpoint Privilege Management (EPM) | —Not included | ✔Included |
|---|
| Intune Enterprise App Management | —Not included | ✔Included |
|---|
| Intune Remote Help | —Not included | ✔Included |
|---|
| Cloud PKI | —Not included | ✔Included |
|---|
| Microsoft Tunnel for mobile application management | —Not included | ✔Included |
|---|
| Firmware updates for specialty devices | —Not included | ✔Included |
|---|
| Intune Advanced Analytics | —Not included | ✔Included |
|---|
| Windows & Cloud PC, 36 differences |
|---|
| Always On VPN | —Not included | ✔Included |
|---|
| App Control for Business | —Not included | ✔Included |
|---|
| AppLocker | —Not included | ✔Included |
|---|
| App Assure | —Not included | ✔Included |
|---|
| Assigned Access | —Not included | ✔Included |
|---|
| BitLocker | —Not included | ✔Included |
|---|
| BitLocker to Go | —Not included | ✔Included |
|---|
| BranchCache | —Not included | ✔Included |
|---|
| Custom logon | —Not included | ✔Included |
|---|
| Custom shell | —Not included | ✔Included |
|---|
| Credential Guard | —Not included | ✔Included |
|---|
| Device Guard | —Not included | ✔Included |
|---|
| DirectAccess (deprecated) | —Not included | ✔Included |
|---|
| Domain join | —Not included | ✔Included |
|---|
| Microsoft Edge for Business | —Not included | ✔Included |
|---|
| Microsoft Entra join | —Not included | ✔Included |
|---|
| Keyboard Filter | —Not included | ✔Included |
|---|
| Windows Local Administrator Password Solution (LAPS) | —Not included | ✔Included |
|---|
| Long-Term Servicing Channel (LTSC) | —Not included | ✔Included |
|---|
| Manage by mobile device management (MDM) | —Not included | ✔Included |
|---|
| Microsoft Desktop Optimization Pack (MDOP, retiring) | —Not included | ✔Included |
|---|
| Persistent memory | —Not included | ✔Included |
|---|
| Resilient File System (ReFS) | —Not included | ✔Included |
|---|
| SMB Direct | —Not included | ✔Included |
|---|
| Unbranded Boot | —Not included | ✔Included |
|---|
| Unified Write Filter | —Not included | ✔Included |
|---|
| Universal Print | —Not included | ✔Included |
|---|
| Windows Autopatch | —Not included | ✔Included |
|---|
| Windows Conditional Access | —Not included | ✔Included |
|---|
| Windows Firewall | —Not included | ✔Included |
|---|
| Windows Hello for Business | —Not included | ✔Included |
|---|
| Windows Update for Business | —Not included | ✔Included |
|---|
| Windows virtualization rights | —Not included | ✔Included |
|---|
| Windows 11 support period | —Not included | 36 months |
|---|
| Windows Quick Machine Recovery | —Not included | ✔Included |
|---|
| Windows post-quantum security APIs | —Not included | ✔Included |
|---|
| Licensing rights & services, 3 differences |
|---|
| Windows Server client access license (CAL) rights | —Not included | ✔Included |
|---|
| FastTrack | —Not included | ✔Included |
|---|
| Office server rights | —Not included | ✔Included |
|---|