What Microsoft does not tell you about Microsoft 365 licensing
By Michal Lampe Sørensen · 7 min read · 25 June 2026
Last updated: 7 October 2026
Verified against Microsoft Learn, October 2026
Contents
In short
Five things Microsoft doesn't highlight: 1) F licenses (F1/F3) may only be assigned to frontline workers as Microsoft defines them, so you cannot put office staff on them to save money. 2) F1/F3 are Kiosk plans with a 2 GB mailbox and 2 GB OneDrive, not cheap versions of the full plans. 3) In the EU you can choose "no Teams" variants of the main plans, often slightly cheaper. 4) Copilot Cowork is billed by consumption through Copilot Credits ($0.01/credit) on top of your Copilot license. 5) Office 365 E5 ($41) and Microsoft 365 E5 ($60) are named almost the same, but only M365 E5 includes Defender for Endpoint, Intune and Windows Enterprise.
1. F licenses may only be assigned to frontline workers
Many people discover the F licenses (F1 and F3) and think: "Perfect, we'll give everyone a cheap license." It doesn't work that way.
Microsoft defines a frontline worker as someone who typically works on a tablet or phone and either deals directly with customers or is involved in producing and distributing products and services: retail associates, healthcare staff, factory workers and the like. Information workers, meaning people with a fixed computer who work in documents, fall outside the definition.
The constraint is who the license may be assigned to, not how many you may buy. Microsoft publishes no numeric ratio between F licenses and Enterprise licenses, and you won't find one in the Product Terms either. But you cannot put office staff on F1 and call them frontline because the price suits you better.
This is one of the traps that shows up late: the budget is built on the F price, and then it turns out half the people meant to carry it are not frontline workers by Microsoft's definition. Work out who actually qualifies before you build a licensing plan around F licenses.
Abbreviations: F = Frontline. SKU = Stock Keeping Unit, Microsoft's product code for a specific license variant.
2. Kiosk is not a cheap version of the full plan
The second trap ties into the first. When you see F1 and F3 next to the full plans, it's tempting to assume it's the same product at a lower price. It isn't.
F1 and F3 are Kiosk plans, and that means concrete limits:
- •F3 has a 2 GB Exchange Kiosk mailbox, not a full 100 GB mailbox. F1 has no mailbox for regular email at all; the access covers calendar features in Teams.
- •SharePoint and OneDrive Kiosk with 2 GB of storage, not the 1 TB OneDrive on the full plans.
- •F1's Office web apps are read-only. The user can view documents in the browser but not edit them.
F3 offers more than F1 (including editing in the Office web apps), but both are still Kiosk level and far from a full Business or Enterprise plan.
The point: "frontline" means limited, not a cheap version of the full thing. If an employee needs a real mailbox, full OneDrive or the ability to edit documents, an F1 won't fit. Match the plan to the actual job, not to the price tag.
3. The no-Teams variants: you don't have to pay for Teams
Here's a trap that costs money every month, because most people don't know it exists.
Following the EU settlement, Microsoft sells "no Teams" variants of the main plans in the EU. They're the same plans you know, just without Teams included, and they're often slightly cheaper than the variant with Teams.
It matters in practice: if you use a collaboration tool other than Teams (Slack, Zoom, Google Meet or similar), you're paying for a feature you don't use if you're on the standard variant. By choosing the no-Teams variant you get the same plan at a slightly lower price.
The option is easy to miss, because the standard variant is usually shown first. Check it actively if Teams is not your primary platform. Microsoft rarely points out that you can opt out of the Teams variant.
4. Copilot Credits: a variable cost on top of the license
Copilot looks like a fixed price per user per month. That holds for the Copilot license itself, but the new Copilot Cowork plays by different rules.
Copilot Cowork is billed by consumption through Copilot Credits, on top of your Copilot license. The model is PayGo (pay-as-you-go) at $0.01 per credit. So it's a variable cost that depends on how much the feature is used, not a fixed amount you can put in the budget up front.
Two things are worth remembering:
- •It requires a Microsoft 365 Copilot license. Copilot Cowork isn't something you can buy on its own; it sits on top of an existing Copilot license.
- •The cost is hard to budget. When the price follows usage, the bill can swing from month to month depending on how much the team uses the feature.
It isn't a trap in the sense that something is hidden in the fine print. It's a cost model Microsoft doesn't highlight, and one that surprises people who expect a fixed Copilot price. Set a cap or monitor usage closely if you adopt Copilot Cowork.
Abbreviations: PayGo = Pay-as-you-go, meaning payment based on actual usage.
5. Office 365 E5 and Microsoft 365 E5 are not the same
This one is the most subtle, and the most expensive to get wrong. The two plans are named almost the same, and that is where the confusion starts. The prices are not alike at all: Office 365 E5 costs $41/user/mo and Microsoft 365 E5 $60/user/mo.
Both include a strong package for collaboration and compliance. The difference lies in security and device management, and it's a big one:
| Feature | Office 365 E5 | Microsoft 365 E5 |
|---|---|---|
| Teams Phone | Yes | Yes |
| Audio Conferencing | Yes | Yes |
| Power BI Pro | Yes | Yes |
| Communication Compliance | Yes | Yes |
| eDiscovery Premium | Yes | Yes |
| Audit Premium | Yes | Yes |
| Defender for Endpoint | No | Yes |
| Endpoint DLP | No | Yes |
| Insider Risk Management | No | Yes |
| Intune | No | Yes |
| Windows Enterprise | No | Yes |
Microsoft 365 E5 includes everything Office 365 E5 has, plus endpoint security (Defender for Endpoint), endpoint data loss protection (Endpoint DLP), Insider Risk Management, device management (Intune) and Windows Enterprise licensing.
The trap: if you choose Office 365 E5 believing you get full security and device management, you're mistaken. Office 365 E5 is strong on telephony and compliance, but it doesn't cover endpoint protection and device management. If you need to protect and manage your devices centrally, Microsoft 365 E5 is the right one.
That $19 gap is what the endpoint security and device management cost. For 100 users it is $22,800 a year. Only Microsoft 365 E5 includes Defender for Endpoint, Intune and Windows Enterprise. Always check which E5 you're on before assuming security is covered.
Abbreviations: DLP = Data Loss Prevention. eDiscovery = electronic discovery of data for legal and compliance purposes.
Remember the July 1, 2026 changes
On top of the five traps came a set of changes on July 1, 2026 that affect the decision:
- •Prices rose on 8 of 10 plans. Business Premium held its price, and E7 only launched on May 1, 2026 and had no price before the increase.
- •Defender for Office 365 P1 was added to E3 and Office 365 E3. This builds more email security into those plans.
- •The Intune Suite was split across E3 and E5. E3 got Remote Help, Advanced Analytics and Intune Plan 2. E5 got those plus Endpoint Privilege Management, Cloud PKI and Enterprise App Management, the whole package.
The changes shifted what each plan includes, and therefore which plan makes sense for you. See the full overview of changes on our changes page before you commit.
Abbreviation: P1 = Plan 1, the first security tier of Defender for Office 365.
Sources: Office 365 plan options (Microsoft Learn) and Microsoft 365 tenant-level services licensing guidance (Microsoft Learn) and License options for Microsoft Copilot (Microsoft Learn) and Microsoft 365 packaging and pricing updates 2026 (Microsoft).
Avoid the traps, pick the right plan
Our free comparison tool shows the plans side by side, so you see exactly what you get, and what you don't.
Compare the plansFrequently asked questions
Who may be given an F license?+
F1 and F3 may only be assigned to frontline workers. Microsoft defines them as people who typically work on a tablet or phone and deal directly with customers or are involved in production and distribution, for example retail associates, healthcare staff and factory workers. Information workers with a fixed computer fall outside that. Microsoft publishes no numeric limit on how many F licenses you may hold, so the constraint is eligibility, not quantity.
Are Office 365 E5 and Microsoft 365 E5 the same?+
No. Office 365 E5 costs $41/user/mo and Microsoft 365 E5 costs $60. Both have Teams Phone, Audio Conferencing, Power BI Pro, Communication Compliance, eDiscovery Premium and Audit Premium. Only Microsoft 365 E5 additionally includes Defender for Endpoint, Endpoint DLP, Insider Risk Management, Intune and Windows Enterprise. If you need endpoint security and device management, Microsoft 365 E5 is the right one.
What does Copilot Cowork actually cost?+
Copilot Cowork is billed by consumption through Copilot Credits on a PayGo model at $0.01 per credit, on top of your Microsoft 365 Copilot license. So it requires a Copilot license and can't be bought on its own. Because the price follows usage, it's a variable cost that can swing from month to month. Monitor usage closely or set a cap if you adopt the feature.