Are you about to buy something you already own?
Every Microsoft 365 comparison tool answers “which plan should I buy”. This one answers the question people actually lose money on: is the add-on in front of you already inside the plan you hold? Pick your plan, answer three questions about the estate, and read 15 verdicts, each one sourced to Microsoft.
Of 15 add-ons checked, 8 you already hold, 1 cannot be used, 1 has nothing to act on, and 5 would genuinely add something.
Exchange Online Archiving
Already includedMicrosoft 365 E3 already includes archiving and does not need this add-on.
Exchange Online Protection (standalone)
Already includedExchange Online Protection is already included in every Microsoft 365 organisation with Exchange Online mailboxes. The standalone subscription is for on-premises mail.
Microsoft Defender for Endpoint Plan 1
Already includedMicrosoft 365 E3 includes Defender for Endpoint Plan 1.
Microsoft Defender for Office 365 Plan 1
Already includedSince 1 July 2026, Office 365 E3 and Microsoft 365 E3 include Defender for Office 365 Plan 1.
Microsoft Entra ID P1
Already includedMicrosoft 365 E3 includes Microsoft Entra ID P1.
Microsoft Intune Plan 1
Already includedMicrosoft 365 E3 includes Microsoft Intune Plan 1.
Microsoft Intune Plan 2
Already includedSince July 2026 Microsoft 365 E3 includes Intune Plan 2, Remote Help and Advanced Analytics.
Microsoft Teams EEA (standalone)
Already includedYour edition already bundles Teams, so the standalone licence would duplicate it.
Microsoft 365 Copilot Business
Cannot be usedCopilot Business requires a Microsoft 365 Business Basic, Standard or Premium licence on the same user. On this plan the enterprise Microsoft 365 Copilot subscription is the applicable product.
Microsoft Defender for Identity
Nothing to act onDefender for Identity works through sensors installed on domain controllers. With no on-premises Active Directory there is nowhere to install one. Microsoft directs environments made up only of Microsoft Entra accounts to Microsoft Entra ID Protection instead.
Microsoft Defender for Business
Genuinely additionalThe enterprise plans carry Defender for Endpoint instead. Defender for Business is the small-business product and is capped at 300 users, so it is not the natural addition here.
Microsoft Defender for Endpoint Plan 2
Genuinely additionalNot included. Plan 2 is what adds endpoint detection and response, automated investigation and remediation, threat and vulnerability management, and six months of data for advanced hunting.
Microsoft Defender for Office 365 Plan 2
Genuinely additionalNot included. Plan 2 is what adds attack simulation training, Threat Explorer, automated investigation and advanced hunting.
Microsoft Entra ID P2
Genuinely additionalNot included. P2 is what adds Identity Protection, risk-based Conditional Access, Privileged Identity Management, access reviews and entitlement management.
Microsoft Intune Suite
Genuinely additionalPartly redundant. Since July 2026 E3 already includes Intune Plan 2, Remote Help and Advanced Analytics. What the Suite still adds here is Endpoint Privilege Management, Microsoft Cloud PKI and Enterprise Application Management, each of which is also sold as a standalone add-on.
The rule base is not a research project of its own. It is what fell out of writing the ITSailor marketplace product pages: for each product we had to establish what the plans above it already include, what it needs to work at all, and where its ceiling sits. Those three facts are exactly what decides whether a purchase is a duplicate.
So every verdict here carries two links. One goes to the Microsoft page the rule was read from. The other goes to the ITSailor page that documents the same boundary in prose, so you can check the reasoning rather than take a coloured label on trust.
Where Microsoft has not published something clear enough to settle a pair, the answer is not settled by the documentation, and it stays that way. Guessing in either direction would make the tool feel more useful and be worth less.
- How is this different from a Microsoft 365 plan comparison table?
- A comparison table runs in the other direction. It tells you what a plan contains, so you can pick one. This tool starts from the plan you already hold and tells you whether the add-on in front of you is already inside it. That is the direction people lose money in, and almost nothing on the web answers it.
- Where do the rules come from?
- Every rule cites a first-party Microsoft page, linked next to each result. The rule base is a by-product of writing the ITSailor marketplace product pages, so each verdict also links to the page that documents the same boundary in prose.
- Why does it never show a price or a saving?
- It has never seen your tenant. A saving figure would be a measured claim about an estate this code cannot observe, so the tool reports inclusion, prerequisites and applicability only, and leaves the arithmetic to you.
- What does "not settled by the documentation" mean?
- That Microsoft has not published something clear enough for the pair you asked about. Rather than guess in either direction, the tool says so and tells you to confirm against your own licence assignment before ordering.
- Does anything leave my browser?
- No. The page makes no network request when you change an answer, stores nothing, and asks for no email address. The evaluation is a pure function running locally.