2. Microsoft 365
A complete, intelligent, secure solution to empower employees
Intelligent
security
Unlocks
creativity
Built for
teamwork
Integrated
for simplicity
4. Microsoft 365 E3 + Microsoft 365 E5 Step-up
M I C R O S O F T 3 6 5 E 3
Office 365 Enterprise E3 Enterprise Mobility & Security E3 Windows 10 Enterprise E3
Office 365 Advanced Threat Protection
Protect email, files, and O365 applications against unknown and sophisticated attacks
Threat Intelligence
Actionable insights to global attack threats; threat intelligence feed & attack simulator
Office 365 Advanced Compliance
Focus on what is unique and relevant by training the system to identify emails and
documents through predictive coding
Reduce document volume with Near Duplicates and Email Threading. Includes :
• Advanced eDiscovery
• Advanced Data Governance
• Customer Key
• Customer Lockbox
• Privileged Access Management
M I C R O S O F T 3 6 5 E 5
Office 365 E5 Security EMS E5 Security
Azure Advanced Threat Protection
Detect and investigate advanced attacks and suspicious behaviors on-premises and in
the cloud.
Microsoft Cloud App Security
Enterprise-grade visibility, control, and protection for your cloud-based apps, while
identifying threats, abnormal usage, and other cloud security issues. (CASB)
Azure Active Directory Premium P2
Risk Based Identity and access management with advanced protection for users and
privileged identities
Azure Information Protection P2
Configure policies to automatically classify and label data based on sensitivity and then
apply persistent protection
Windows 10 E5 Security
Advanced Endpoint Security
Windows Defender Advanced Threat Protection
• Endpoint Detection and Response (EDR)
• Endpoint Protection Platform (EPP)
5. Microsoft 365 E3 + Identity & Threat Protection
M I C R O S O F T 3 6 5 E 3
Office 365 Enterprise E3 Enterprise Mobility & Security E3 Windows 10 Enterprise E3
Office 365 Advanced Threat Protection
Protect email, files, and O365 applications against
unknown and sophisticated attacks
Threat Intelligence
Actionable insights to global attack threats; threat
intelligence feed & attack simulator
I D E N T I T Y & T H R E A T P R O T E C T I O N
Office 365 E5 EMS E5
Azure Advanced Threat Protection
Detect and investigate advanced attacks and
suspicious behaviors on-premises and in the cloud.
Microsoft Cloud App Security
Enterprise-grade visibility, control, and protection
for your cloud-based apps, while identifying threats,
abnormal usage, and other cloud security issues.
(CASB)
Azure Active Directory Premium P2
Risk Based Identity and access management with
advanced protection for users and privileged
identities
Windows 10 E5
Advanced Endpoint Security
Windows Defender Advanced Threat Protection
• Endpoint Detection and Response (EDR)
• Endpoint Protection Platform (EPP)
6. Microsoft 365 E3 + Information Protection & Compliance
M I C R O S O F T 3 6 5 E 3
Office 365 Enterprise E3 Enterprise Mobility & Security E3 Windows 10 Enterprise E3
Office 365 Advanced Compliance
Focus on what is unique and relevant by training the
system to identify emails and documents through
predictive coding
Reduce document volume with Near Duplicates and
Email Threading. Includes :
• Advanced eDiscovery
• Advanced Data Governance
• Customer Key
• Customer Lockbox
• Privileged Access Management
I N F O R M A T I O N P R O T E C T I O N A N D C O M P L I A N C E
Office 365 E5 Compliance EMS E5 Compliance
Azure Information Protection P2
Configure policies to automatically classify and label
data based on sensitivity and then apply persistent
protection
7. Microsoft 365 E3 + Meetings and Calling
M I C R O S O F T 3 6 5 E 3
Office 365 Enterprise E3 Enterprise Mobility & Security E3 Windows 10 Enterprise E3
Audio Conferencing
Use a tolled dial-in number to join meetings from any
device. Dial out to bring participants into the meeting
Phone System
Centrally manage users for communications, email, and
content from Office 365. Eliminate separate PBX systems
and transition to the cloud
Calling Plans (Add-on License)
Subscribe to calling plans from Office 365. Use existing
phone numbers or get new ones
M E E T I N G S A N D C A L L I N G
Office 365 E5 Voice
8. Microsoft 365 E3 + Analytics
M I C R O S O F T 3 6 5 E 3
Office 365 Enterprise E3 Enterprise Mobility & Security E3 Windows 10 Enterprise E3
Power BI Pro
Gain fast, easy access to the data you need with a
simple intuitive experience
Access a live, 360º view of your business through a
single dashboard
Discover new insights by exploring your data with
rich visualizations
A N A L Y T I C S
Office 365 E5 Analytics
10. Microsoft 365 Licensing
M365 Business
$20/u/m
Office 365 E3
$20/u/m
Windows 10 Enterprise E3
per user
(Including VDA rights)
$5/u/m
EMS E3
$9/u/m
Office 365 Business Premium
$12.50/u/m
Windows 10 Enterprise E5
per user
(Including VDA rights)
$10/u/m
EMS E5
$15/u/m
1
0Microsoft Internal Use Only
M365 Firstline (F1)
$10/u/m
M365 E3
$32/u/m
M365 E5
$57/u/m
Office 365 E5
$35/u/m
Office 365 F1
$4/u/m
Windows Pro
Limited AAD Features1
Windows 10 Enterprise E3
(Local only)2
EMS E3
$9/u/m
1. Limited AAD Premium features includes no self service group management, no Cloud App discovery, no Connect Health
2. Windows 10 Enterprise included in F1 is the full Windows 10 Enterprise E3 edition does not include virtualization rights, downgrade rights and other version/edition rights
Pricing is No Level –Final pricing mayvary due to rounding and geo location
Indicates sold as Standalone
Indicates not sold Standalone
Microsoft Intune
Exchange Online Archiving
Azure Information Protection
Plan 1
Office 365 ATP
11. Microsoft Cloud App
Security
Azure Active Directory
Plan 2
Azure ATP
Windows Defender
ATP
Office 365 ATP Plan 2
M365 E5 packaging changes (effective February 2019)
Office 365 Threat
Intelligence
Office 365 ATP
Office 365 Cloud App
Security
Phone System
Audio
Conferencing
Azure Information
Protection Plan 2
Office 365 Advanced
Compliance
Power BI Pro
MyAnalyticsO365 E5
($15)
EMS E5
($6)
Windows E5
($5)
Existing $2 ATP offer retained as competitive fallback; O365 CAS will be sunset
Identity &
Threat
Protection
$12
Information
Protection &
Compliance
$10
Microsoft Internal Use Only Pricing is No Level/Web Direct – Final pricing may vary due to rounding and geo location
Security Meetings & CallingCompliance Analytics
12. M365 F1
$10
M365 E31
$32
M365 E51
$57
Office Client
Applications
Word, Excel, PowerPoint
OneNote, Access
Office Mobile Apps Word Mobile, Excel Mobile, PowerPoint Mobile, OneNote Mobile, Outlook Mobile 2
Email & Calendar Outlook, Exchange 3
Chat-based Workspace Microsoft Teams
Voice, Video &
Meetings
Skype for Business 4
Audio Conferencing, Phone System
Social & Internet SharePoint & Yammer 5
Threat Protection Microsoft Advanced Threat Analytics, Windows Defender Antivirus, Device Guard6
Windows Defender Advanced Threat Protection, Office 365 Advanced Threat Protection, Azure Advanced
Threat Protection, Office 365 Threat Intelligence
Identity & Access
Management
Azure Active Directory Premium Plan 1, Windows Hello, Credential Guard and Direct access6
Azure Active Directory Premium Plan 2
Device & App
Management
Microsoft Intune
Windows AutoPilot, Fine Tuned User Experience, and Windows Analytics Device Health
Information Protection Windows Information Protection & BitLocker
Azure Information Protection Plan 1
Azure Information Protection Plan 2, Microsoft Cloud App Security, O365 Cloud App Security
Office 365 Data Loss Prevention
Advanced Compliance Advanced eDiscovery, Customer Lockbox, Advanced Data Governance, Customer Key, Privileged Access
Management
Advanced Analytics Delve
Power BI Pro, MyAnalytics
Pricing is No Level – Finalpricing mayvarydue to rounding andgeo location
Microsoft 365 Enterprise Plan Overview
See Speaker Notes forfootnotes
13. Windows Enterprise Offerings Included with M365
Additional offerings available for Windows IoT and Education products
See Speaker Notes forfootnotes
Windows 10 Enterprise E3 Windows 10 Enterprise E5
Included with M365 E3 M365 E5
Threat Protection
Attack Surface Reduction ◕1 ●
Next generation protection ◕2 ●
Endpoint Detection and Response ●
Automatic Investigation and Remediation ●
Security Posture ●
Cross Platform, Extensibility and Integration ●
Information Protection
Data loss prevention ● ●
Full volume encryption ◕3 ●
Identity and Access Control
Multifactor authentication and biometrics ● ●
Credential protection ◕4 ●
14. M365 F1 M365 E3 M365 E5
Standard
Services
Install Office on up to 5 PCs/Macs + 5 tablets + 5 smartphones per user ProPlus4 ProPlus4
OneDrive for Business – personal online document storage 2GB9 1-5+ TB8 1-5+ TB8
Office Mobile Apps – Create/edit rights for Office Mobile apps on smartphones and tablets
Office Online – Create/edit rights for online versions of core Office apps
Sway for Office 3655
To-Do – Personal task management app
PowerApps and Flow 11
Team collaboration & internal portals (SharePoint), Internal social networking (Yammer) 15
Email - 50 GB email, contacts, shared calendars (Exchange) 2GB13 16 16
Skype for Business, Microsoft Teams – Conferencing, meetings, IM/presence, chat-centered workspace 10
Microsoft Bookings
Outlook Customer Manager, Invoicing, Business center, Listings, Connections & MileIQ
Microsoft Stream 12
Advanced
Services
On-premises Active Directory synchronization for single sign on
Mobile Device Management (MDM) for Office 3656
Access to equivalent on-premise servers (Exchange, SharePoint, Skype for Business)
Legal compliance & archiving needs for email – archiving, eDiscovery, mailbox hold
Information protection – message encryption, rights management, data loss prevention
Enterprise Voice w/Skype for Business (on-prem only)7
Office 365 Cloud App Security, Advanced Compliance, Advanced Threat Protection, Threat Intelligence
Threat Intelligence
Data analytics and visualization (Power BI Pro), end user and team analytics (MyAnalytics)
Phone System, Audio Conferencing
Office 365 Offerings Included with Microsoft 365 Plans
14
See Speaker Notes forfootnotes
15. M365 F1 M365 E3 M365 E5
Identity and
access
management
Simplified access management and security: Centrally manage single sign-on across devices, your datacenter, and the cloud.
Multi-factor authentication: Strengthen sign-in authentication with verification options, including phone calls, text messages, or mobile app
notifications, and use security monitoring to identify inconsistencies
Conditional access: Define policies that provide contextual controls at the user, location, device, and app levels to allow, block, or challenge user
access.
Risk-based conditional access: Protect apps and critical data in real time using machine learning and the Microsoft Intelligent Security Graph to
block access when risk is detected.
Advanced security reporting: Monitor suspicious activity with reporting, auditing, and alerts, and mitigate potential security issues using focused
recommendations.
Privileged identity management: Provide timely, on-demand administrative access to online services with access-related reporting and alerts.
Windows Server Client Access License (CAL)*: Provide each user access to server functions from multiple devices for a single fee.
Managed
mobile
productivity
Mobile device management: Enroll corporate and personal devices to provision settings, enforce compliance, and protect your corporate data.
Mobile application management: Publish, configure, and update mobile apps on enrolled and unenrolled devices, and secure or remove app-
associated corporate data.
Advanced Microsoft Office 365 data protection: Extend management and security capabilities across users, devices, apps, and data, while
preserving a rich, productive end-user experience.
Integrated PC management: Centralize management of PCs, laptops, and mobile devices from a single administrative console, and produce detailed
hardware and software configuration reporting
Integrated on-premises management: Extend your on-premises management to the cloud from a single console with Microsoft System Center
Configuration Manager and Microsoft System Center Endpoint Protection integration for enhanced PC, Mac, Unix/Linux server, and mobile device
administration.
Information
Protection
Persistent data protection: Encrypt sensitive data and define usage rights for persistent protection regardless of where data is stored or shared.
Document tracking and revocation:
Monitor activities on shared data and revoke access in case of unexpected events.
Intelligent data classification and labeling: Configure policies to automatically classify and label data based on sensitivity and then apply persistent
protection
Encryption key management per regulatory needs: Choose default key management options or deploy and manage your own keys to comply with
regulations.
Identity-
driven
Security
Microsoft Advanced Threat Analytics: Detect abnormal behavior in on-premises systems and identify advanced targeted attacks and insider threats
before they cause damage.
Microsoft Cloud App Security: Gain visibility, control, and protection for your cloud-based apps, while identifying threats, abnormal usage, and other
cloud security issues.
Azure Advanced Threat Protection: Detect and investigate advanced attacks and suspicious behaviors on-premises and in the cloud.
+Customers purchasing Windows Server CAL agreements, System Center Configuration Manager, System Center Endpoint Protection, Microsoft Active Directory Rights Management Services CALs via the Microsoft Enterprise Volume Licensing agreements may purchase the Enterprise Mobility +
Security Add-on offer
EMS Offerings Included with Microsoft 365 Plans
16. Availability and pricing for Microsoft 365 suites
1 There are no technical blockers for customers to purchase Office 365 Cloud App Security, but usage can only be achieved if an Office 365 workload is deployed.
2 Availability and included minutes may vary by region. To verify service availability, refer to https://docs.microsoft.com/en-us/microsoftteams/country-and-region-availability-for-audio-conferencing-and-calling-plans/. Consumption
charges may apply for additional services, such as toll-free, international minutes for domestic plans, etc. Customers can disable these features to avoid additional billing.
3 Usage limited to Microsoft Teams. Usage with Skype for Business requires Skype for Business Plan 2.
4 Phone System required
5 $24 includes both International and Domestic calling plans. Domestic only calling plans are available for $12. Tax is included in price in the US, Puerto Rico and Canada. Service usage limits exist to manage fraud, abuse, excessive
use, and maintain service performance.
M365 F1 M365 E1 M365 E3 M365 E5 Price
Security Office 365 Advanced Threat Protection + + + ● $2
Office 365 Cloud App Security
1
+ + + ● $3
Advanced Compliance + + + ● $8
Threat Intelligence + + + ● $8
Office 365 Data Loss Protection + + ● ● $3
Analytics MyAnalytics + + + ● $4
Power BI Pro + + + ● $10
Workplace Analytics + + + + $6/$2
Voice
2
Audio Conferencing +3
+ + ● $4
Phone System + + + ● $8
Calling Plan +4
+4
+4
+ $12/$24
5
Premium add-on services ●
Notas del editor
Microsoft 365 Enterprise delivers on 4 key promises:
Unlocks creativity by enabling people to work naturally with ink, voice and touch, all backed by tools that utilize AI and machine learning.
Provides the broadest and deepest set of apps and services with a universal toolkit for teamwork, giving people flexibility and choice in how they connect, share and communicate.
Simplifies IT by unifying management across users, devices, apps and services.
Helps safeguard customer data, company data and intellectual property with built-in, intelligent security.
Let us look deeper into each of these promises.
We are living in a time of inflection. Digital transformation is the biggest change any of us has seen in our lifetime.
Companies invest in technology to optimize operations, transform products, engage customers, and empower employees.
The challenge for us and for our customers will be about finding the way to empower people to do their best work. This starts with fostering a culture of work that is inspiring for everyone.
The challenge for us and for our customers will be about finding the way to empower people to do their best work. This starts with fostering a culture of work and embracing the trends in the workplace that make work inspiring for everyone.
And we know there is tremendous opportunity for business growth and innovation from doing so.
But today, our solutions are not best-equipped to address these changing needs.
Customers are telling us that we need to do more – that our solutions are still too complex.
To deliver on this, we are simplifying customer experience by bringing together O365, Windows 10 and EMS - with introduction of Microsoft 365
So, what is Microsoft 365? It’s a complete, intelligent solution that empowers everyone to be creative and work together, securely.
It includes Office 365, Windows 10 and Enterprise Mobility + Security
For the enterprise customers, Microsoft 365 Enterprise is built on the foundation of Secure Productive Enterprise
SLIDE INCLUDES ANIMATIONS
Here’s a look at what’s changing…
1. We’re O365 ATP value into Threat Intelligence and renaming it Office 365 ATP Plan 2 (and by the way, we’re also dropping the standalone price from $8 to $5) (click)
2. O365 Cloud App Security standalone being retired as the value is included in MCAS (click)
3. New Microsoft 365 Identity & Threat Protection SKU unifies security value across Office 365, Windows and EMS into a single Add-on to M365 E3. (click)
4. New Microsoft 365 Information Protection+ Compliance combines O365 Adv Compliance and Azure Info Protection into to a single Add-on to M365 E3 (click)
5. MyAnalytics value added to all M365 and O365 suites to drive end-user engagement and simplify E5 sales conversation (click)
1Productivity Server Rights – SharePoint, Exchange and Skype for Business productivity server rights for M365 E3 & E5 customers (Hybrid Rights unavailable in CSP Channel).
2Limited to devices with integrated screens 10.1” diagonally or less.
32GB Inbox, No Voicemail.
4Meetings are join only, 1:1 audio/video calls are supported, No Desktop or App Sharing
5Cannot be Site Administrators, No Site Mailbox, No Personal Site, Cannot Create Form
6Not available on Windows 10 Enterprise E3 in S mode
1Includes:
Web protection for Microsoft Edge and Internet Explorer
Vulnerability and zero-day exploit mitigations
Controlled folder access
Advanced vulnerability and zero-day exploit mitigations
Boot integrity protection for Windows operating system
Hardware-based tamper proofing of Windows device integrity and security subsystems
Hardware based container for Windows components
Hardware isolation for Microsoft Edge
Allow and deny list based application control
Automated management of application control using the Intelligent Security Graph
Web protection for all applications
Firewall based attack surface area reduction (ASR) controls
Enterprise enforcement and management of hardware isolation for Microsoft Edge
Does not include:
Enterprise management and enforcement of device integrity (for Conditional Access)
Attack surface area reduction (ASR) controls
Hardware-based tamper proofing of Windows device integrity and security subsystems
Remote runtime tampering detection
Hardware isolation for Office
---------------------------------------------------------------------------------------------------------
2Includes:
Pre-execution emulation executables and scripts
Advanced runtime behavior monitoring
Advanced protection from viruses and malware threats
Advanced protection from fileless based attacks
Cloud protection for fastest responses to new/unknown threats
Does not include:
Emergency outbreak protection from the Intelligent Security Graph
ISO 27001 compliance
Geolocation and sovereignty of sample data
Sample data retention policy
---------------------------------------------------------------------------------------------------------
3Includes:
Automatic encryption on capable devices
Advanced encryption configuration options
Removable storage protection
Enterprise management (key recovery, reporting, enforcement) and enforcement
Does not include:
Centralized configuration mgmt, analytics, reporting, and security operations
---------------------------------------------------------------------------------------------------------
4Includes:
Hardware isolation of single sign-in tokens
Does not include:
Centralized configuration mgmt, analytics, reporting, and security operations
1Business plans include business hours support for all non-critical issues, 24/7 phone support from Microsoft, and a 300 seat cap limit for all Business plans
2 Enterprise plans include 24/7 phone support from Microsoft for all issues and has an unlimited seat cap
3Includes Word, Excel, PowerPoint, Outlook, OneNote, Publisher
4Adds Access, Group Policy, Telemetry, support for shared computer activation (RDS), Push Deployment, Update Controls, IRM, DLP, BI, Enterprise Voice, Site Mailboxes, Archiving & Retention
5Sway is not currently available for Government Community Cloud (GCC) customers and customers in certain geographies at this time. Some legacy Office 365 plans that are no longer in market as of August 2015 may also not have access to Sway.
6Also included with Exchange Online, OneDrive for Business, SharePoint Online, and Skype for Business standalone plans.
7Enterprise Voice is licensed only for On-prem PBX.
8 Unlimited OneDrive storage for subscriptions of five or more users. Microsoft will provide an initial 5 TB of OneDrive storage per user. Customers who want additional OneDrive storage can request it as needed by contacting Microsoft support. Subscriptions for fewer than five users receive 1 TB OneDrive storage per user.
9 Does not include desktop sync functionality.
10 Microsoft Teams: 1:1 A/V calls supported, Meetings right limited to join only, no create/initiate, SFB capabilities in F1 include Skype for Business Plan 1
11 PowerApps and Flow in F1 limited to consumption only, no create/share (PowerApps), and limited Flow runs (750 per user per month)
12 Consumption only for Microsoft Stream, no publish/share
13 2GB inbox only, No Outlook Integration, No Voicemail.
14 Core Office Mobile Apps include: Outlook, Word, Excel, PowerPoint, OneNote. F1 and E1 users limited to devices with integrated screens 10.1” diagonally or less.
15 Cannot be administrators. No site mailbox. No personal site. F1 users unable to create forms.
16 Email for E3 and E5 offer 100GB email storage.
17 Invoicing, Business center, Listings, Connections, and MileIQ SMB apps are available only in the United States, Canada, and United Kingdom.