Microsoft Intune licensing
Microsoft Intune is available for different customer needs and organization sizes, from a simple-to-use management experience for schools and small businesses, to more advanced functionality required by enterprise customers. Most licenses that include Microsoft Intune also grant the rights to use Microsoft Endpoint Configuration Manager, as long as the subscription remains active. An admin must have a license assigned to them to administer Intune (unless you allow unlicensed admins).
Intune is included in the following licenses:
- Microsoft 365 E5
- Microsoft 365 E3
- Enterprise Mobility + Security E5
- Enterprise Mobility + Security E3
- Microsoft 365 Business Premium
- Microsoft 365 F1
- Microsoft 365 F3
- Microsoft 365 Government G5
- Microsoft 365 Government G3
- Intune for Education
For additonal licensing information about Intune for Education, see Microsoft 365 Education.
Microsoft Intune for Education
Intune for Education is included in the following licenses:
- Microsoft 365 Education A5
- Microsoft 365 Education A3
Licensing for Configuration Manager-managed devices in Intune
For existing Configuration Manager-managed devices to enroll into Intune for co-management at scale without user interaction, co-management uses an Azure Active Directory (Azure AD) feature called Windows 10 auto-enrollment. Auto-enrollment with co-management requires licenses for both Azure AD Premium (AADP1) and Intune. Starting on December 1, 2019, you no longer need to assign individual Intune licenses for this scenario. Microsoft Endpoint Manager now includes the Intune licenses for co-management. The separate AADP1 licensing requirement remains the same for this scenario to work. You still need to assign Intune licenses for other enrollment scenarios.
Microsoft Endpoint Manager offers premium add-ons. Licenses for the premium add-ons can be added for an additional cost to the licensing options that include Microsoft Endpoint Manager or Intune.
Remote Help: This add-on capability allows secure, helpdesk-to-endpoint connections with role-based remote access permissions.
- A Microsoft Intune user and device subscription is available as a standalone, in addition to the bundles listed above.
- A Microsoft Intune device-only subscription is available to manage kiosks, dedicated devices, phone-room devices, IoT, and other single-use devices that don't require user-based security and management features. For more information, see Device-only licenses.
- The appropriate Microsoft Intune license is required if a user or device benefits directly or indirectly from the Microsoft Intune service, including access to the Microsoft Intune service through a Microsoft API.
- Intune isn't included in licenses not in the previous tables.
For more information about giving administrators access to Microsoft Endpoint Manager without them having an Intune license, see Unlicensed admins.
Microsoft Intune offers a device-only subscription service that helps organizations manage devices that aren't affiliated with specific users.
You can purchase device licenses based on your estimated usage. Microsoft Intune device licenses are applicable when a device is enrolled through any of the following methods:
- Windows Autopilot Self-Deploying mode
- Apple Device Enrollment Program without user affinity
- Apple School Manager without user affinity
- Apple Configurator without user affinity
- Android Enterprise dedicated
- Using a device enrollment manager account
Visit the Microsoft Licensing page, or contact your account representative if you have any questions or you would like to receive the latest information about product editions, product licensing updates, volume licensing plans, and other information related to your specific use cases.
Device-only license limitations
When a device is enrolled by using a device license, the following Intune functions aren't supported:
- Intune app protection policies
- Conditional access
- User-based management features, such as email and calendaring
Confirm your licenses
A Microsoft Intune license is created for you when you sign up for the Intune free trial. As part of this trial, you'll also have a trial Enterprise Mobility + Security (EMS) subscription. An Enterprise Mobility + Security (EMS) subscription includes both Azure Active Directory Premium and Microsoft Intune.
If you are unable to access this portal using the step below, or if you don't have an Intune license, you can sign up now for the Intune free trial. When setting up Intune, you can give an administrators access to Microsoft Endpoint Manager without them requiring an Intune license.
To confirm your Microsoft Intune license or trial, use the following steps:
- Sign in to Microsoft Endpoint Manager admin center.
- Select Tenant administration > Tenant status.
Under the Tenant details tab, you will see the MDM authority, the Total licenses users, and the Total Intune licenses.
- Select Tenant administration > Roles > My permissions.
- Confirm you are an administrator with full permissions to all Intune resources.
For more in-depth information about Microsoft Intune, see the learning module: Set up Microsoft Intune.
To check on your Azure AD Premium license, use the following steps:
- Sign in to the Azure portal.
- Select Azure Active Directory.
- Select Overview. On the Overview pane, select the Overview tab if it isn't already selected.
- Under Basic information, view your license.
If you don't have a license for Azure AD Premium, see Sign up for Azure Active Directory Premium editions.
For the latest information about product editions, product licensing updates, volume licensing plans, and other information related to your specific use cases, see the Microsoft Licensing page.
For information about how user and device licenses affect access to services, as well as how to assign a license to a user, see the Assign Intune licenses to your user accounts article.