Microsoft licensing is deliberately confusing, and the wrong choice is expensive in both directions. Under-licence and you are missing security controls you assumed you had. Over-licence and you pay for capability nobody uses. Here is how the two most commonly compared plans differ for an Australian SMB.
The short answer
If you have fewer than 300 users, Business Premium is usually the better choice. It bundles the security and device management tooling that most SMBs actually need at a materially lower price than E3 plus the equivalent add-ons. E3 becomes the right answer when you cross 300 seats, or when you need specific enterprise capabilities.
What each plan includes
| Capability | Business Premium | E3 |
|---|---|---|
| Office desktop apps | Yes | Yes |
| Exchange, SharePoint, Teams | Yes | Yes |
| User cap | 300 | Unlimited |
| Intune device management | Yes | Yes |
| Entra ID (Conditional Access) | Plan 1 | Plan 1 |
| Defender for Office 365 | Plan 1 | Not included |
| Defender for Business | Yes | Not included |
| Azure Information Protection | Plan 1 | Plan 1 |
| Advanced compliance and eDiscovery | Limited | Yes |
| Unlimited archive mailbox | No | Yes |
The detail people miss: E3 does not include Defender for Office 365. If you buy E3 expecting advanced email threat protection, you need to add it separately, which is what usually erases E3 apparent cost advantage at the top end of the SMB range.
The 300 user cliff
Business Premium is capped at 300 seats per tenant. This is a hard limit, not a soft one, and businesses growing through the 200s should be planning for it rather than discovering it. The jump to enterprise licensing is a meaningful per-user increase, and it is worth modelling twelve months out so it lands in a budget rather than a surprise.
When E3 is genuinely the right call
- You are over 300 users, or will be within the year
- You need advanced eDiscovery or retention for legal or regulatory reasons
- You need unlimited archive mailboxes, common in legal and financial services
- You have a Microsoft agreement where enterprise licensing is already priced favourably
When Business Premium wins
- Under 300 users, which covers the large majority of Australian SMBs
- You want device management and endpoint protection included rather than bolted on
- You are working toward Essential Eight and need MFA, Conditional Access and patch tooling
- You would otherwise buy E3 and then add Defender and Intune anyway
The mistake we see most often
Businesses paying for Business Premium and using perhaps a third of it. Intune sits undeployed, Conditional Access is never configured, Defender policies stay on defaults, and Azure Information Protection is untouched. The licence is not the problem in that scenario. The deployment is.
Before changing plan, it is worth checking what you are already entitled to. In licensing reviews we frequently find businesses that could materially improve their security posture at no additional licence cost, simply by configuring what they already own.
Getting it reviewed
Xen IT is a Microsoft Partner and licensing review is part of our free IT assessment. We will tell you where you are over-licensed, where you are exposed, and what you are paying for that nobody is using. You keep the findings either way.
Ready to stop fighting your IT?
Book a free, no-obligation IT assessment. We'll identify your biggest vulnerabilities and opportunities, and give you a clear roadmap, whether you engage us or not.