Microsoft Intune Plan 1: scope and prerequisites
Microsoft Intune Plan 1
per user per month, excluding VAT
Ask a questionNo markup on top of Pax8's suggested retail. My margin is the Pax8 wholesale discount.
Check whether your current plan already includes this: Licence Overlap Check, free, and nothing leaves your browser.
Microsoft Intune Plan 1 is the base of Microsoft's endpoint management service: cloud-based management of devices and applications across Windows, macOS, iOS and Android, covering both company-owned devices and personal devices under application management. It is the plan that most organisations already hold without buying it, because it is included in Microsoft 365 Business Premium, Microsoft 365 E3, E5 and E7. The standalone licence is for organisations on plans that do not carry it. One prerequisite is easy to miss: enforcing the compliance rules Intune creates requires Microsoft Entra ID P1 or P2 as well, because enforcement happens in Conditional Access.
What it is
Microsoft Intune Plan 1 is the base tier of Microsoft's unified endpoint management service. It enrols, configures, secures and monitors devices and applications from the cloud.
Who it is for
Organisations managing a mixed estate of company and personal devices that want configuration, compliance and application management from one service rather than separate tools per platform.
Key capabilities
- Mobile device management for company-owned devices
- Mobile application management for personal devices, protecting company data without managing the whole device
- Cross-platform support including Windows, macOS, iOS and Android
- Device configuration profiles and security baselines
- Compliance policies used as a signal by Conditional Access
- Application deployment and protection policies
- Endpoint analytics
Check whether you already have it
Intune Plan 1 is included in Microsoft 365 Business Premium and in Microsoft 365 E3, E5 and E7. Most organisations reach Intune through one of those rather than by buying this licence. The standalone plan is for tenants on Microsoft 365 Business Basic, Business Standard or another plan that does not carry it.
Requirements
An Intune licence is required for every user or device that benefits from the service, directly or indirectly, including access through a Microsoft API. To enforce the compliance or password rules Intune creates, Microsoft Entra ID P1 or P2 is also required, because enforcement happens through Conditional Access. Administrators do not always need a licence of their own.
Do I already have Intune Plan 1?
Probably, if you are on Microsoft 365 Business Premium or Microsoft 365 E3, E5 or E7. All four include Intune Plan 1. The standalone licence is for plans that do not carry it, such as Microsoft 365 Business Basic or Business Standard.
Is Intune enough on its own to enforce compliance?
No. Intune creates the compliance and password rules, but enforcement happens in Conditional Access, which requires Microsoft Entra ID P1 or P2. Plan for both licences together.
Does every user need a licence?
A licence is required for any user or device that benefits from the service directly or indirectly, including access through a Microsoft API. Administrators do not always need one.
Can Intune manage personal devices without taking control of them?
Yes. Mobile application management protects company data inside managed applications on a personal device without enrolling and managing the whole device.
What does Plan 2 add?
Plan 2 is additive to Plan 1 and brings advanced endpoint management capabilities. Since July 2026 several of those capabilities are also distributed through the Microsoft 365 enterprise plans, so check what your suite already includes before buying.
- Vendor
- Microsoft
- Category
- Endpoint
- Type
- SaaS
- Billing
- Monthly
- Commitment
- 1-Year
- Available terms
- Monthly, 1-Year
- SKU
- MST-NCE-185-C100
- 1You request the licence, or add it to the cart.
- 2I confirm price, term and seats, and check your VAT number in VIES. Businesses in the EU only.
- 3You pay before we provision, under the CSP Marketplace Terms. The invoice comes from Michal Jatczak, a sole trader registered in Malta, trading as ITSailor. Reverse charge for an EU VAT number that validates in VIES.
- 4Your authorised signatory accepts the Microsoft Customer Agreement before activation.
- 5I place the order with Pax8 within one business day of payment.