Microsoft Intune Plan 2 [New Commerce Experience]
Microsoft Intune Plan 2
Microsoft Intune Plan 2 is additive to Plan 1, not a replacement for it: it extends the base endpoint management service with advanced capabilities. Before buying it, check what your Microsoft 365 plan already carries, because the answer changed recently. From July 2026 Microsoft began distributing Intune Suite capabilities across the enterprise tiers: Microsoft 365 E3 includes Plan 2 along with Remote Help and Advanced Analytics, and Microsoft 365 E5 and E7 include those plus Endpoint Privilege Management, Microsoft Cloud PKI and Enterprise Application Management. Organisations on other plans buy Plan 2 or the Intune Suite separately.
What it is
Microsoft Intune Plan 2 adds advanced endpoint management capabilities on top of Microsoft Intune Plan 1. It is additive, so Plan 1 remains the base service and Plan 2 extends it.
Who it is for
Organisations already managing endpoints with Intune Plan 1 that need capability beyond the base service, and that are on a Microsoft 365 plan which does not already include it.
Check your suite first, because this changed in July 2026
Microsoft now distributes Intune Suite capabilities across the Microsoft 365 enterprise tiers:
- Microsoft 365 E3 includes Intune Plan 2, Remote Help and Advanced Analytics.
- Microsoft 365 E5 and E7 include everything in E3 plus Endpoint Privilege Management, Microsoft Cloud PKI and Enterprise Application Management.
- Other plans buy Plan 2 or the Intune Suite as a separate subscription.
An organisation on E3 or above that buys Plan 2 separately is very likely paying twice. Confirm against the licences already assigned before ordering.
Key capabilities
- Everything in Microsoft Intune Plan 1
- Advanced endpoint management capability layered on the base service
- Microsoft Tunnel for Mobile Application Management, extending the Tunnel VPN gateway to unenrolled Android and iOS devices
- Management of specialised devices, including AR and VR headsets, large smart screens and meeting room devices
- Firmware over-the-air updates for supported Android devices
The relationship to the Intune Suite
The Intune Suite includes Plan 2 and unifies the wider set of advanced endpoint management and security capabilities. Individual capabilities such as Remote Help, Advanced Analytics, Endpoint Privilege Management, Microsoft Cloud PKI and Enterprise Application Management are also sold as standalone add-ons, so a single missing capability does not require the whole suite.
Requirements
Intune Plan 1 is the base. As with Plan 1, enforcing compliance rules through Conditional Access requires Microsoft Entra ID P1 or P2.
Does my Microsoft 365 plan already include Intune Plan 2?
Since July 2026, Microsoft 365 E3 includes Plan 2 along with Remote Help and Advanced Analytics, and E5 and E7 include those plus Endpoint Privilege Management, Microsoft Cloud PKI and Enterprise Application Management. Check your assigned licences before buying separately.
Is Plan 2 a replacement for Plan 1?
No. Plan 2 is additive. Plan 1 remains the base endpoint management service and Plan 2 extends it with advanced capabilities.
What is the difference between Plan 2 and the Intune Suite?
The Intune Suite includes Plan 2 and unifies the wider set of advanced endpoint management and security capabilities. Plan 2 is the narrower step up from the base service.
Do I have to buy a whole plan for one capability?
No. Remote Help, Advanced Analytics, Endpoint Privilege Management, Microsoft Cloud PKI and Enterprise Application Management are each available as standalone add-ons on top of Intune Plan 1 or Plan 2.
Does Plan 2 remove the Entra ID requirement?
No. Enforcing compliance and password rules still happens through Conditional Access, which requires Microsoft Entra ID P1 or P2 regardless of the Intune plan.
- Vendor
- Microsoft
- Category
- Endpoint
- Type
- SaaS
- Billing
- Monthly
- Commitment
- 1-Year
- Available terms
- 1-Year, Monthly
- Unit price
- €3.60 /mo
- SKU
- MST-NCE-285-C100
- 1You prepay through ITSailor (Malta) — VAT handled, reverse-charge for valid EU VAT IDs.
- 2We provision through Pax8 wholesale into your Microsoft tenant — no third-party MSP markup.
- 3You keep the tenant. Sovereign by default — every engagement closes with an Exit Kit.
Pax8 wholesale, margin in the price
Microsoft Intune Enterprise Application Management (Education Student Pricing) [New Commerce Experience]
Microsoft Intune Enterprise Application Management enables IT admins to easily discover, deploy prepackaged third party and Microsoft applications, and keep them updated using a securely hosted enterprise catalog.
Microsoft Intune Enterprise Application Management (Education Faculty Pricing) [New Commerce Experience]
Microsoft Intune Enterprise Application Management enables IT admins to easily discover, deploy prepackaged third party and Microsoft applications, and keep them updated using a securely hosted enterprise catalog.
Microsoft Intune (Education Student Pricing) [New Commerce Experience]
Microsoft Intune Plan 1 helps organizations provide their employees with access to corporate applications, data, and resources from anywhere on almost any device, while helping secure corporate information.
Microsoft Intune Plan 2 (Education Student Pricing) [New Commerce Experience]
Microsoft Intune Plan 2 is an add-on to the Intune service that offers a collection of advanced endpoint management capabilities.