Skip to content
Microsoft logo
Microsoft

Microsoft 365 E3 [New Commerce Experience]

ProductivitySaaSMonthly1-Year
SKU MST-NCE-105-C100

Microsoft 365 E3

Microsoft 365 E3 is the enterprise baseline: Microsoft 365 Apps, a 100 GB Exchange mailbox, Windows 11 Enterprise, Microsoft Entra ID P1, Microsoft Intune Plan 1 and Microsoft Defender for Endpoint Plan 1. Since 1 July 2026 it also carries Microsoft Defender for Office 365 Plan 1. What it does not carry is the whole reason E5 exists: no Privileged Identity Management, no Identity Protection or risk-based Conditional Access, no access reviews, no entitlement management, no endpoint detection and response, no Insider Risk Management, and eDiscovery that can search but not delete. E3 has no user cap, unlike the Business plans.

What it is

Microsoft 365 E3 is the entry plan in Microsoft's enterprise range. It combines productivity, Windows, identity and device management with the foundational tier of Microsoft's security products.

Who it is for

Organisations past the 300 user ceiling of the Microsoft 365 Business plans, or below it but needing enterprise features such as Windows 11 Enterprise. E3 is the plan most organisations standardise on before deciding whether the E5 security and compliance layer is worth the step up.

Key capabilities

  • Microsoft 365 Apps on desktop, web and mobile
  • Exchange Online with a 100 GB mailbox and archiving included
  • Windows 11 Enterprise and Windows Autopilot
  • Microsoft Entra ID P1 for Conditional Access and multifactor authentication
  • Microsoft Intune Plan 1 for device and application management
  • Microsoft Defender for Endpoint Plan 1 for preventive endpoint security
  • Microsoft Defender for Office 365 Plan 1, included since 1 July 2026
  • Core Microsoft Purview: retention policies, manual retention labels, Standard Audit

What is not included

The gap between E3 and E5 is specific and worth reading before choosing. E3 does not include Privileged Identity Management, Microsoft Entra ID Protection or risk-based Conditional Access, access reviews, or entitlement management. On endpoints it has Plan 1 only, so no endpoint detection and response, no automated investigation and remediation, and no threat and vulnerability management. On compliance it has no Insider Risk Management, no Communication Compliance, Standard rather than Advanced Audit, and eDiscovery that can search but not delete.

Requirements

No user minimum or maximum. Microsoft 365 Copilot is an add-on to E3, not part of it.

Features
Microsoft 365 Apps across desktop, web and mobile
Exchange Online 100 GB mailbox with archiving
Windows 11 Enterprise and Autopilot
Microsoft Entra ID P1 and Conditional Access
Microsoft Intune Plan 1
Defender for Endpoint Plan 1, preventive only
Defender for Office 365 Plan 1 since 1 July 2026
No user cap, unlike the Business plans
Use cases
Standardising an enterprise on one licence for productivity, Windows, identity and device management
Moving off Microsoft 365 Business Premium after passing 300 users
Establishing Conditional Access and Intune management across a mixed device estate
Setting a security baseline before deciding whether the E5 layer is justified
FAQ
What is the real difference between Microsoft 365 E3 and E5?

E5 adds Microsoft Entra ID P2 (Privileged Identity Management, Identity Protection, risk-based Conditional Access, access reviews, entitlement management), Defender for Endpoint Plan 2, Defender for Office 365 Plan 2, Intune Plan 2, and the advanced Purview layer including Insider Risk Management, Communication Compliance, Advanced Audit and eDiscovery that can delete.

Does Microsoft 365 E3 include endpoint detection and response?

No. E3 includes Defender for Endpoint Plan 1, which is preventive. Endpoint detection and response is a Plan 2 capability and therefore an E5 capability, or a separate Plan 2 licence.

Does E3 include email protection?

Yes. Microsoft Defender for Office 365 Plan 1 has been included in Microsoft 365 E3 and Office 365 E3 since 1 July 2026. Plan 2, which adds attack simulation training, Threat Explorer and automated investigation, remains an E5 capability.

Is there a user limit on E3?

No. The 300 user ceiling applies to the Microsoft 365 Business plans, not to the enterprise range. E3 is also the usual destination for organisations that outgrow Business Premium.

Does E3 include Microsoft 365 Copilot?

No. Copilot is a separate add-on licence for E3 and E5. It is bundled only in Microsoft 365 E7.

Plan details
Vendor
Microsoft
Category
Productivity
Type
SaaS
Billing
Monthly
Commitment
1-Year
Available terms
Monthly, 1-Year
Unit price
€36.20 /mo
SKU
MST-NCE-105-C100
Conversions & upgrades

Term or edition paths Microsoft allows this subscription to move to.

How buying works
  1. 1You prepay through ITSailor (Malta) — VAT handled, reverse-charge for valid EU VAT IDs.
  2. 2We provision through Pax8 wholesale into your Microsoft tenant — no third-party MSP markup.
  3. 3You keep the tenant. Sovereign by default — every engagement closes with an Exit Kit.
Microsoft NCE termsNew Commerce Experience applies: within 7 days of activation you may cancel or reduce seats (pro-rated). After day 7 the subscription is committed for the term. We mirror this verbatim — no surprises.
Your price
Term
Billing cycle
€38.10/mo
Pax8 suggested retail €39.673% off Pax8 suggested retail
Quantity
1
Ask a question

Pax8 wholesale, margin in the price