What Microsoft won't tell you about Microsoft 365 licensing

Many people discover the F licenses (F1 and F3) and think: "Perfect, we'll give everyone a cheap license." It doesn't work that way.

Microsoft's Frontline Worker Policy says two things. First: F licenses are only intended for frontline workers, meaning people without a fixed desk who typically work in shifts or on the move (retail, warehouse, production, healthcare). Second: there's a hard cap on how many F licenses you can hold relative to your Enterprise licenses per tenant (your Microsoft 365 environment).

In other words, you can't fill the whole organization with F licenses to save money. If you have few or no Enterprise licenses, you can't add a large number of F licenses on top. The F licenses are meant as a supplement to an organization that already runs on Enterprise plans, not as a replacement for them.

This is one of the traps that shows up late: the budget is built on the F price, and then you discover that the ratio doesn't allow the distribution you'd planned for. Check the ratio before you build a licensing plan around F licenses.

Abbreviations: F = Frontline. SKU = Stock Keeping Unit, Microsoft's product code for a specific license variant.

The second trap ties into the first. When you see F1 and F3 next to the full plans, it's tempting to assume it's the same product at a lower price. It isn't.

F1 and F3 are Kiosk plans, and that means concrete limits:

• •A 2 GB Exchange Kiosk mailbox, not a full 50 GB mailbox. For F1 the mailbox is really only meant for Teams calendar features, not for regular email in Outlook.
• •SharePoint and OneDrive Kiosk with 2 GB of storage, not the 1 TB OneDrive on the full plans.
• •F1's Office web apps are read-only. The user can view documents in the browser but not edit them.

F3 offers more than F1 (including editing in the Office web apps), but both are still Kiosk level and far from a full Business or Enterprise plan.

The point: "frontline" means limited, not a cheap version of the full thing. If an employee needs a real mailbox, full OneDrive or the ability to edit documents, an F1 won't fit. Match the plan to the actual job, not to the price tag.

Here's a trap that costs money every month, because most people don't know it exists.

Following the EU settlement, Microsoft sells "no Teams" variants of the main plans in the EU. They're the same plans you know, just without Teams included, and they're often slightly cheaper than the variant with Teams.

It matters in practice: if you use a collaboration tool other than Teams (Slack, Zoom, Google Meet or similar), you're paying for a feature you don't use if you're on the standard variant. By choosing the no-Teams variant you get the same plan at a slightly lower price.

Many people never spot the option, because the standard variant is the one usually shown first. It's worth checking actively if Teams isn't your primary platform. Microsoft rarely points out that you can opt out of the Teams variant.

Copilot looks like a fixed price per user per month. That holds for the Copilot license itself, but the new Copilot Cowork plays by different rules.

Copilot Cowork is billed by consumption through Copilot Credits, on top of your Copilot license. The model is PayGo (pay-as-you-go) at $0.01 per credit. So it's a variable cost that depends on how much the feature is used, not a fixed amount you can put in the budget up front.

Two things are worth remembering:

• •It requires a Microsoft 365 Copilot license. Copilot Cowork isn't something you can buy on its own; it sits on top of an existing Copilot license.
• •The cost is hard to budget. When the price follows usage, the bill can swing from month to month depending on how much the team uses the feature.

It isn't a trap in the sense that something is hidden in the fine print. It's a cost model Microsoft doesn't highlight, and one that surprises people who expect a fixed Copilot price. Set a cap or monitor usage closely if you adopt Copilot Cowork.

Abbreviations: PayGo = Pay-as-you-go, meaning payment based on actual usage.

This one is the most subtle, and the most expensive to get wrong. The two plans are named almost the same and cost almost the same. But they are not the same.

Both include a strong package for collaboration and compliance. The difference lies in security and device management, and it's a big one:

Microsoft 365 E5 includes everything Office 365 E5 has, plus endpoint security (Defender for Endpoint), endpoint data loss protection (Endpoint DLP), Insider Risk Management, device management (Intune) and Windows Enterprise licensing.

The trap: if you choose Office 365 E5 believing you get full security and device management, you're mistaken. Office 365 E5 is strong on telephony and compliance, but it doesn't cover endpoint protection and device management. If you need to protect and manage your devices centrally, Microsoft 365 E5 is the right one.

Abbreviations: DLP = Data Loss Prevention. eDiscovery = electronic discovery of data for legal and compliance purposes.

On top of the five traps comes a set of changes taking effect in July 2026 that affect the decision:

• •Prices rise on 8 of 10 plans. A few plans hold their price, the rest go up.
• •Defender for Office 365 P1 is added to E3 and Office 365 E3. This builds more email security into those plans.
• •Selected Intune Suite features are added to E3 and E5.

The changes shift what each plan includes, and therefore which plan makes sense for you. See the full overview of changes on our changes page before you commit.

Abbreviation: P1 = Plan 1, the first security tier of Defender for Office 365.