Even when your company size is 50 people. You could start using Microsoft Business, full cloud. With real value and benefits as in Microsoft 365 E3. You could even use M365 E5 for small business when data control and cloud security is required. Micrososoft 365 E5 License overview Office 365 – standard set.
-->Microsoft 365 Business Premium has everything you need for your small business, combining the best-in-class cloud-based productivity apps with simple device management and security. If you currently have an Office 365 E3 subscription, but don't have more than 300 employees, consider switching to Microsoft 365 Business Premium for added security features.
Migrating is easy: First you switch licenses and all your data and user information in your current subscription is maintained. After the migration, you'll need to set up the features that are added in Microsoft 365 Business Premium.
This table shows the differences between Microsoft 365 Business Premium and Office 365 E3.
Feature | Support in Microsoft 365 Business Premium | Support in Office 365 E3 |
---|---|---|
On-premises | ||
Office apps1 | Microsoft 365 Apps for business | Microsoft 365 Apps for enterprise |
Cloud productivity apps | ||
Exchange Online and Outlook | 50 GB storage limit per mailbox and unlimited Exchange Online Archiving | 100 GB storage limit per mailbox and unlimited Exchange Online Archiving |
Teams | ||
OneDrive for Business | 1 TB storage limit per user | Unlimited |
Yammer, SharePoint Online, Planner, Stream | ||
StaffHub | ||
MileIQ | ||
Threat Protection | ||
Defender for Office 365 Plan 1 | Not included, but can be added on | |
Identity management | ||
Self-service password reset for hybrid Azure Active Directory (Azure AD) accounts, Azure AD multi-factor authentication (MFA), Conditional Access, password writeback for on-premises identities | ||
Device and app management | ||
Microsoft Intune, Windows AutoPilot | ||
Shared computer activation | ||
Upgrade rights to Windows 10 Pro from Win 7/8.1 Pro licenses | ||
Information protection | ||
Office 365 Data Loss Prevention | ||
Azure Information Protection Plan 1, BitLocker enforcement | ||
Azure Information Protection Plan 1, Sensitivity labels | ||
Client Access License (CAL rights) | ||
Enterprise CAL Suite (Exchange, SharePoint, Skype) |
1 The Microsoft 365 Business Premium version of the Office apps doesn't include volume activation through Group Policy, app telemetry, update controls, spreadsheet compare and inquire, or business Intelligence.
To migrate your subscription, see Change plans manually for instructions if you want to move just a few people to Microsoft 365 Business Premium. You can also upgrade everyone automatically, or work with a partner to move your E3 subscription and licenses to a Microsoft 365 Business Premium subscription.The following sections describe the changes you need to make, if any, and what you can do after the migration.
You don't need to do any changes to your current subscription or data before migrating, which includes:
If your Windows aren't already on Windows Pro Creator update, upgrade them to Windows Pro Creators Update.
Note
If you set up Office 365 MDM policies and devices, those devices will be listed on the Devices page in the Microsoft 365 admin center. Any policies you set up will show up in the list of classic policies in the Intune portal.
After you have assigned licenses to Microsoft 365 Business Premium, you can start protecting the users' devices and files.
If you upgraded everyone in your organization to Microsoft 365 Business Premium, you'll see the setup wizard on the Home page, and can follow the Set up Microsoft 365 Business Premium in the setup wizard steps to protect files and mobile devices.
You can also complete these steps on the Devices page:
In the admin center, in the left nav, go to Devices > Policies.
On the Device policies page, choose Add.
In the Add policy pane give the policy a name, and then choose a Policy type from the drop-down.
You can set up application policies for protecting files on Android and iPhone devices, as well as Windows 10, and you can set up device configuration policies for company owned Windows 10 devices. See the following links for details:
See Set up Windows devices for Microsoft 365 Business Premium users for steps for Windows devices.
See Set up mobile devices for Microsoft 365 Business Premium users for steps for Android phones and iPhones.
Microsoft 365 Business Premium has a 50 GB storage limit as it uses Exchange Online Plan 1. While migrating to Microsoft 365 Business Premium, if any of your users exceed 50 GB of mailbox storage, it is recommended that you assign this user an Exchange Online Plan 2 and remove the Exchange Online Plan 1 as it's not feasible to assign both.
After migrating to Microsoft 365 Business Premium, you have Defender for Office 365. See Microsoft Defender for Office 365 for an overview. To set up, see set up Safe Links, set up Safe Attachments, and set up Anti-phishing in Defender for Office 365.
To start using sensitivity labels, see Overview of sensitivity labels and create and manage sensitivity labels video.
This article was originally published on: http://jasperbernaers.com/the-value-of-microsoft-365-e3-or-e5
1. Protection across the attack kill chain. This slide shows the real value of Microsoft 365 E5. A lot of customers al laughing with MDATP because they think this is a isolated product. And are going deep in the license compare strategy of their current antivirus. Have a separated anti-spam solution, NO Azure AD Protection, NO cloud App Security..
2. Microsoft 365 E5 has: O365 ATP, Windows Defender ATP, Azure ATP + Cloud App Security. Read below!
3. Cloud App Security: Cloud App Security shows you exactly whether data is passing on all endpoints. Document data, lateral movements, usage of applications, global traffic, count of applications in use in your organisation. Risk levels, GDPR proof applications. Bring network devices logging in CASB to have more insights.
4. Security & Compliance: I've seen that there a not enough organizations aware of the richness of the Security & Compliance possibilities in Microsoft 365. Because of shifting to Microsoft 365 the compliance will be in control of your organization. Even if you leave some file-servers and SharePoint services on-premise.
5. Identity & Access management: Because of simplified Identity management organizations are able to work with Security perimeters to protect their users and organization. Because of these simplified configuration users will be able to reset their own password, control their own devices, or configure additional security components. (ZERO-IT)
6. Self-Service Password Reset (SSPR)is an Azure Active Directory (AD) feature that enables users to reset their passwords without contacting IT staff for help. People can unblock themselves and continue working no matter where they are.
7. Managed Mobile Device: Cloud intelligence drives management. Use Autopilot to roll-out new devices and Increase productivity, reduce help-desk costs and Provide the best employee experience. Manage you Windows 10 devices and your mobile devices. Stop allowing personal devices without taking control of organization data. Use MAM and be diplomatic for end-users.
8. Microsoft Defender Security Center Security operations dashboard: The Security operations dashboard is where the endpoint detection and response capabilities are surfaced. It provides a high level overview of where detections were seen and highlights where response actions are needed. USE your built-in possibility for SECOPS reporting. You HAVE IT.
9. Identity driven Security: Because of the use of a single identity in Azure. Or hybrid synced from your local Active Directory services organizations will be able to protect and automatically act when necessary. request for update your password if breached. Ask MFA when your device is not trusted. etc.. let your users update their password from home. Increase ⬆️productivity.
10. Risky Sign-ins:This great feature will bring based on cloud intelligence insights to understand the RISK of a user. for example unfamiliar location, anonymous IP addresses, leaked credentials.. (more info here)
11. Information Protection: To start with classification and labeling of document choose your battles. Define 1-2-3 labels for example: 'High-Confidential Internal Only', 'Public' and 'Internal Only'. It's a good start without auto-labeling documents so people can learn how to protect their confidential data. In a later phase you can enable auto-labeling when a document is highly confidential because of there are credit-card numbers, personal information etc in this document. The activation of Information Protection could come from the fact that 1 million files are shared with external people. Or that you want to stop third-party applications so company data stays safe in the environment.
12. Advanced Threat Protection:Work with Microsoft Defender Security Center (previous WDATP) it will give you insights for Applications, OS, Network, Accounts, Security Controls + Give insights for Software patching, Top vulnerable software, Top exposed machines. Most reports are built-in and seamless integration is done in the Eco-system of Microsoft 365 E5.
13. Windows 10 Enterprise with MODERN approach
Windows 10: My personal favorite. I really love customers which did their homework and started using Windows 10 without policies, governance, Intune (for example), management solutions and now they are stuck in the patching & management of these systems. This is wrong! ❌
Microsoft Windows 10: Windows 10 has been released to insiders in 2015. version. 1507 afterwards 1511, 1607, 1703,1709, 1803,1809,1903,1909. Microsoft did understand the pain of shifting from Windows XP to Windows 7, Windows 8 to 8.1 and Windows 10. And now they want you to work on this NEW versions in a different way.
Microsoft's Windows 10 Enterprise: comes in the flavor of continues improvement. And needs to be implemented in a service-model with automatic updates, roll-outs, deployment, patching, updating, software requests (self-service) and even more! ✅
Set compliance policies: Because of deep integrations you will be able to work on the compliance of the devices and grow to a recurrent update-model.
14. Desktop Analytics: Thanks to desktop analytics you will be able to evaluate the changes during updates as software distribution and compatibility issues. You can bring your organization to a next level. In case you were afraid that automation took your job, think again. These things need huge attention!
15. Native PowerBI Integration: Because of the rich Eco-system within Microsoft 365 everything can be measured. This report is default/standard without any manipulation of Power-bi. I know it sounds stupid, but without insights that can grow fast. You have nothing. Features/services are changing every year. Be prepared. Start consolidation and start using standards to built on.