Standalone mobile device and app management — enroll, configure, and enforce compliance on phones, tablets, and PCs — without a bundling Microsoft 365 plan.
Included in
Derived from the service plans Microsoft provisions with each SKU — Microsoft publishes no product-in-bundle mapping.
Commercial
- Enterprise Mobility + Security E3
- Enterprise Mobility + Security E5
- Microsoft 365 Business Premium +3 variants
- Microsoft 365 E3 +6 variants
- Microsoft 365 E5 +10 variants
- Microsoft 365 E5 Developer (without Windows and Audio Conferencing)
- Microsoft 365 E7
- Microsoft 365 F1 (M365_F1) +1 variant
- Microsoft 365 F3 +1 variant
- Microsoft Intune Device
- Microsoft Intune SMB
- Microsoft Teams Rooms Pro +1 variant
- Microsoft Teams Rooms Standard +1 variant
- Microsoft Teams Shared Devices
- Teams Rooms Premium
- Microsoft 365 F1 (M365_F1_COMM)
- Microsoft Intune Plan 1 A VL
GCC
- Enterprise Mobility + Security G3 GCC
- Enterprise Mobility + Security G5 GCC
- Microsoft 365 F3 GCC
- Microsoft 365 G3 - Unattended License for GCC
- Microsoft 365 G3 GCC
- Microsoft 365 GCC G5
- Microsoft 365 GCC G5 w/o WDATP/CAS Unified
- Microsoft Intune Device for Government
- Microsoft Teams Shared Devices for GCC
Education
- Enterprise Mobility + Security A3 for Faculty
- Intune for Education
- Microsoft 365 A1
- Microsoft 365 A3 - Unattended License for students use benefit
- Microsoft 365 A3 for Faculty
- Microsoft 365 A3 for Students
- Microsoft 365 A3 for students use benefit
- Microsoft 365 A5 for faculty
- Microsoft 365 A5 for Students
- Microsoft 365 A5 for students use benefit
- Microsoft 365 A5 without Audio Conferencing for students use benefit
- Microsoft Teams Rooms Pro for EDU
- Microsoft Teams Shared Devices for Faculty
What's included
Curated capability groupings first, then every remaining service plan Microsoft provisions with this SKU — together they're the complete list, nothing is hidden.
| Device Management |
|---|
| Intune Device Management Cloud-based mobile device and application management — enroll, configure, and enforce compliance policies on company and personal devices. Enroll, configure, and manage Windows, iOS, Android, and macOS devices: compliance policies, app deployment, and remote wipe. |
| Windows Autopilot Cloud-based mobile device and application management — enroll, configure, and enforce compliance policies on company and personal devices. Provision and configure new Windows devices out of the box, straight from the cloud, with no imaging. Autopilot itself has no separate license line item — it’s an Intune-dependent deployment workflow, mapped here to Intune Plan 1 as the plan that actually enables managing the enrolled device afterward. |
| BitLocker Management Cloud-based mobile device and application management — enroll, configure, and enforce compliance policies on company and personal devices. Centrally enforce BitLocker drive encryption policy and escrow recovery keys. BitLocker itself ships with Windows Pro/Enterprise; cloud-based policy and key escrow specifically need Intune, mapped here as the enabling plan since there’s no dedicated BitLocker-management license line item. |
Intune Device Management