If you have fewer than 300 users, Business Premium is still the sensible default. Move to E3 when you will pass 300 users, or when you specifically need something E3 carries and Business Premium does not: Exchange Online Plan 2, Windows Enterprise rights or the Intune Plan 2 capabilities Microsoft added to Microsoft 365 E3 in 2026. Be careful in the other direction too. Business Premium includes Defender for Business, with endpoint detection and response, while Microsoft documents only Defender for Endpoint Plan 1 for E3. Since 1 July 2026 both plans include Defender for Office 365 Plan 1, so any comparison that treats that as a Business Premium advantage is out of date. Verify against your own tenant and a written quote before you change anything.
What changed in July 2026 and why older comparisons mislead
Most Business Premium versus E3 articles were written before 1 July 2026, and the thing they most often get wrong is email protection. Microsoft's service description now says Defender for Office 365 Plan 1 (Safe Links, Safe Attachments, anti-phishing and real-time detections) is included with Microsoft 365 E3 and Office 365 E3 from that date. Business Premium already had it. Neither plan includes Plan 2, so automated investigation and response, Threat Explorer and attack simulation training still need E5 or an add-on.
The same Microsoft licensing update lists Intune Remote Help, Intune Advanced Analytics and Intune Plan 2 under Microsoft 365 E3 only, not Office 365 E3. Microsoft said the rollout would finish by 1 August 2026, with at least 30 days' notice in the Message center before the new packaging reached a tenant. As of 5 November 2026 that window has passed, but check your own tenant rather than assuming it arrived.
You will see third-party summaries that blur Office 365 E3 and Microsoft 365 E3, or that claim more than Microsoft's own pages say. Where we describe an entitlement below, it comes from a Microsoft page we name in the sources. Microsoft changes these documents without much ceremony, which is the one dependable thing about licensing.
The one hard limit: 300 users
Business Premium, Business Standard and Business Basic are designed for organisations with up to 300 users. Microsoft counts that limit across the whole Business family of plans in a tenant. If you have 250 seats of Business Premium you can add only 50 more seats across all Business plans combined. Microsoft says it reserves the right to enforce the 300-licence tenant limit and advises organisations above that size to consider Microsoft 365 enterprise plans.
We could not find a Microsoft page describing what enforcement looks like in practice, so do not assume a tenant at 310 users will carry on quietly, and do not assume it will be cut off either. If you are within a year or so of 300, ask your reseller or Microsoft directly, in writing, what they would do. The related Business Premium add-on suites also carry a 300-seat cap, so adding them does not extend the ceiling.
Microsoft does allow Enterprise, Business and standalone plans to be combined in one account. That can look like a clever way to run a few E3 seats alongside Business Premium. Check it carefully before relying on it, because the Business-family seat count still applies, and some services apply to the whole tenant rather than to individually licensed users. Microsoft's Defender for Office 365 terms, for example, require a licence for every user who accesses a mailbox that benefits from the protection.
Where E3 genuinely differs from Business Premium
These are the differences we could confirm from Microsoft's documentation. They are the ones worth testing against your actual requirements.
- User cap: Business Premium is limited to 300 users. E3 is an enterprise plan with no cap.
- Exchange Online: Business Premium includes Exchange Online Plan 1 and E3 includes Plan 2, according to Microsoft's plan options table. If your question is really about archive mailboxes, check what you need first. Exchange Online Archiving is also sold as an add-on that Microsoft says can be added to Business plans.
- Windows: E3 gives you Windows Enterprise E3 through subscription activation, where a licensed user signing in on an eligible Windows Pro device that is Microsoft Entra joined or hybrid joined steps it up to Enterprise. Microsoft allows this on up to five devices per user. Microsoft's Business Premium FAQ describes Windows for business as Windows 11 Pro and Pro for Workstations. If you do not use Enterprise-only Windows features, this difference may be worth little to you.
- Intune: both include Intune Plan 1 (Microsoft's Business Premium device-management guidance says so for Business Premium). Microsoft 365 E3 now adds Remote Help, Advanced Analytics and Intune Plan 2 capabilities, and these matter mainly if you manage a lot of devices and want remote-assistance tooling built in.
- Endpoint security: Business Premium includes Defender for Business, which Microsoft lists with endpoint detection and response, automated investigation and remediation, automatic attack disruption and core vulnerability management. Microsoft lists Defender for Endpoint Plan 1 as part of Microsoft 365 E3, and its own comparison table shows Plan 1 without endpoint detection and response or automated investigation. Moving a Business Premium estate to E3 could therefore reduce endpoint detection unless you price in an add-on, and eligibility for any add-on is something to confirm with your reseller.
What is the same, and often overlooked
Several things people assume are E3 upgrades are in Business Premium too. Microsoft Entra ID P1 is included in both, and with it Conditional Access, the feature that lets you require multi-factor authentication or compliant devices under set conditions. If your driver is Cyber Essentials, note that the NCSC requirements say authentication to cloud services must always use multi-factor authentication, which both plans can deliver.
On the compliance side, Microsoft's Purview licensing page lists Business Premium and E3 together for Audit (Standard), organisation-wide retention policies, retention labels and Compliance Manager. Audit (Premium), with up to a year of audit log retention, is an E5 feature or an add-on for Business Premium. So E3 is not automatically a big compliance step up. Take your specific requirement, find that feature on the Purview service description and see which plans are listed.
Compare the price like for like
Microsoft's own pricing update gives US list prices. Microsoft 365 E3 with Teams moved from $36 to $39 per user per month on 1 July 2026, and Business Premium is shown at $22 with no change. On those figures E3 costs roughly 1.8 times as much per user. Existing customers stay on their current prices until renewal.
We have deliberately not quoted pounds. We could not fetch a Microsoft UK price page, and the third-party UK sites we found disagree with each other on the E3 figure. Ask your reseller or Cloud Solution Provider (CSP) for a written quote that states the currency, whether it includes VAT, the subscription length, the billing frequency, and whether it is the with-Teams or without-Teams edition, since Microsoft lists both. If you intend to keep Defender for Business-level endpoint detection while on E3, ask for the add-on included in the comparison.
Check your own position before deciding
Nothing here changes your tenant. Steps 3 to 5 are optional and read-only, but they give you evidence rather than a reseller's recollection.
- Write down what you actually need, in plain terms rather than product names: your headcount now and in two years compared with 300, whether you need archive mailboxes, whether anyone needs Windows Enterprise features, how many devices you manage and whether you want built-in remote help for them, and how detailed your endpoint investigations need to be.
- Look at what you pay for today. In the Microsoft 365 admin center, use Subscriptions in the Simplified view, or Billing then Your products in the Dashboard view. Note each plan name, the licence count, the subscription term and the renewal date.
- Optional: list your licence SKUs with Microsoft Graph PowerShell. Run this on an admin workstation that has the Microsoft Graph PowerShell module installed. It needs an account with the Global Reader or Directory Readers role, and the sign-in asks for consent to the read-only LicenseAssignment.Read.All permission. It changes nothing. You should get one row per SKU showing purchased and assigned counts.
Connect-MgGraph -Scopes "LicenseAssignment.Read.All" -NoWelcome Get-MgSubscribedSku | Select-Object SkuPartNumber, ConsumedUnits, @{Name='Purchased';Expression={$_.PrepaidUnits.Enabled}} - Optional: see which service plans one SKU switches on, for example to check whether an E3 SKU shows the new Defender for Office 365 Plan 1 or Intune Plan 2 service plans. Replace YOUR_SKU_PART_NUMBER with a SkuPartNumber from the previous output, then compare the names with Microsoft's product names and service plan identifiers page. A plan marked as Success is provisioned. Ask your reseller about any you expected but cannot find.
Get-MgSubscribedSku | Where-Object { $_.SkuPartNumber -eq 'YOUR_SKU_PART_NUMBER' } | Select-Object -ExpandProperty ServicePlans | Select-Object ServicePlanName, ProvisioningStatus - Sign out of Graph PowerShell when you have finished.
Disconnect-MgGraph - If you are on E3 and have not seen the new capabilities, look through the Message center for the packaging notice Microsoft promised, and ask your reseller to confirm before you assume the entitlement exists.
- Get the written like-for-like quote described above, then compare the total yearly cost against the specific requirements from step 1. If no requirement favours E3 and you are comfortably under 300 users, the decision is usually straightforward.
If you decide to switch
Changing plan is a billing and licensing action, so treat it as one. For a tenant billed under a Microsoft Customer Agreement, Microsoft says you need to be a billing account owner or contributor, or a billing profile owner or contributor. For older Microsoft Online Services Agreement accounts, the minimum is Billing Administrator. If you buy through a CSP, the partner usually makes the change for you, so involve them first.
In the admin center, Microsoft's route for a Microsoft Customer Agreement account is to open the subscription, find Other subscription options, select Change to a different subscription option, then choose the date, number of licences, term and billing frequency before selecting Change plan.
- All users on the old plan are moved to the new one, and user data, including mailboxes and SharePoint content, is retained. Users should see no interruption, and Microsoft says the change can take up to an hour, during which you cannot edit the subscription details.
- Service-level assignments are not preserved. If you had switched individual services off for some users, note those settings first, because everyone gets access to every service in the new plan and you will need to recreate any restrictions.
- Billing on the old subscription stops and billing on the new one starts the day the change completes, and a prorated credit may follow. Do not assume an annual commitment can be cancelled for a refund. For Microsoft Customer Agreement accounts, Microsoft's cancellation refund window is seven days from the start or renewal, so read your terms before committing.
- Moving some users only is a different path: buy the licences you need in the new plan and assign them to the chosen users.
- Going from E3 back down to Business Premium is the riskier direction. Microsoft says an automatic change works only to a plan with the same data-related services or a higher version, and a move to fewer services needs a manual change with your own data backed up first. Because Exchange Online Plan 2 becomes Plan 1, treat any move down as a planned project, not a billing tweak.
What we could not confirm
Microsoft's own plan comparison PDFs would normally settle some of this, but we could not read them as text, so this article relies on Microsoft's service descriptions and licensing pages instead. Please treat the following as open until you have checked them with your reseller or Microsoft:
- UK pound prices, including VAT treatment, for either plan.
- What Microsoft does in practice when a tenant exceeds 300 Business-family licences.
- The resulting mailbox size from the extra email storage Microsoft's update lists for Business Premium. We found the line but not a figure we could verify.
- Whether a given Business Premium to E3 move leaves you eligible for a Defender for Business-style endpoint add-on.
Technical terms explained
- Conditional Access
- A Microsoft Entra feature that applies rules at sign-in, such as requiring multi-factor authentication or a compliant device. It needs Entra ID P1, which both plans include.
- CSP
- Cloud Solution Provider: a Microsoft partner that sells and manages Microsoft cloud subscriptions on your behalf, usually in pounds and often with their own support.
- endpoint detection and response
- Security tooling that records activity on laptops and other devices so suspicious behaviour can be spotted, investigated and contained, rather than relying only on blocking known malware.
- Message center
- The area of the Microsoft 365 admin center where Microsoft posts advance notice of changes, including new features and packaging updates for your tenant.
- Purview
- Microsoft's family of data governance and compliance tools, including audit logs, retention policies, labels and eDiscovery.
- subscription activation
- A Windows feature that steps a Windows Pro device up to Enterprise when a user with the right licence signs in with their Entra account, without a product key or reinstall.
- tenant
- Your organisation's own Microsoft 365 and Entra environment, identified by your domain. Licences, users and settings all live inside it.
Sources and further reading
- Microsoft 365 and Office 365 plan options - Service Descriptions (Microsoft Learn)
- Microsoft Defender for Office 365 service description (Microsoft Learn)
- Microsoft 365 Pricing and Packaging Updates (Microsoft Licensing)
- Microsoft 365 Packaging and Pricing Updates Public FAQ (Microsoft Licensing)
- Microsoft 365 Business Premium frequently asked questions (Microsoft Learn)
- What is Microsoft Defender for Business? (Microsoft Learn)
- Microsoft Defender service description (Microsoft Learn)
- Microsoft Purview service description (Microsoft Learn)
- Microsoft Entra licensing (Microsoft Learn)
- Microsoft Intune licensing plans and options (Microsoft Learn)
- Microsoft Intune device management in Microsoft 365 Business Premium (Microsoft Learn)
- Windows subscription activation (Microsoft Learn)
- Upgrade or change to a different Microsoft 365 for business plan (Microsoft Learn)
- List subscribedSkus - Microsoft Graph v1.0 (Microsoft Learn)
- Cyber Essentials: Requirements for IT Infrastructure v3.3 (NCSC)