PTS Managed Services · Hong Kong · Singapore · China
The Microsoft 365 plan picker
Microsoft licensing is per-user — the mix is the decision, and uniformity is what you pay for not making it. Tell the picker who's on your team and what you're trying to do, and it builds a right-sized licence mix at current list prices, shows what it changes against today's bill, and health-checks the habits that quietly inflate it.
Pick your starting point, then enter the basics on the Overview tab — the mix and the costs rebuild themselves as you type.
Start here
Showing for On Business plans · 23 people · BYOD · apps alongsideMicrosoft licensing is per-user, and nothing requires uniformity — which means the mix, not the plan, is the decision. Tell the picker who you are and it builds a right-sized licence mix at current list prices, then health-checks the spending and security habits around it.
The question is whether you're on the right rung. Standard-to-Premium is the step that matters: US$9.50 more per user buys Intune, EDR and conditional access — the components that decide how bad a phishing email gets to be. If you're already on Premium, the wins are hygiene: leavers, shared mailboxes, duplicated apps, and switching on the security you already own.
Next: the licence health check →
PTS designs, licenses and runs Microsoft 365 for businesses across Hong Kong, Singapore and mainland China — as a Microsoft partner/CSP, with ISO/IEC 27001 and 20000 certification.
A grounded start for on business plans
- A free licence review against real usage reports — who holds what, who uses what, what overlaps
- The mix implemented: tier changes, true-downs and add-ons handled at the renewal that makes them free
- Security features you already pay for switched on and configured — MFA, conditional access, Defender, Intune
- CSP billing in HKD with a local team on the phone, not a card on autopay
Your licence health check
Showing for On Business plans · 23 people · BYOD · apps alongsideAnswer from what you actually know — "Not sure" is a perfectly good answer and usually the honest one for a licence estate. Your answers build the assessment on the next tab and stay in this browser unless you send them.
Spend hygiene
Security you already pay for
Fit
Your Microsoft 365 plan mix
Showing for On Business plans · 23 people · BYOD · apps alongsideOn Business plans · 23 people (20/0/3) · mostly on Business Standard · no goals selected yet
The recommended mix
| Licence | Seats | List / user / mo | List / month | Why |
|---|---|---|---|---|
| Business Premium | 23 | US$22 | US$506 | the SME default — Office plus Intune for every device, EDR and conditional access |
| Total | 23 | US$506/mo | ≈HK$3,947/mo — list, before CSP terms |
Assuming all 23 people sit on Business Standard today (≈US$287.50/mo list), the recommended mix costs more — because it buys the security layer Business Standard doesn't have. That's the step that decides how bad a phishing email gets to be; the health check below usually finds offsetting waste.
Licence health
What you'll likely need
Built from the shape of your business and your goals — each item says why it's there. This is a starting scope, not a quote: PTS validates the mix against your real usage reports in the free review.
Licence rightsizing & CSP procurement
The mix above validated against real usage reports, then bought and billed properly — HKD invoicing, annual/monthly mix, one point of contact.
Because you told us: rightsizing reviews routinely cut 10–30% from the Microsoft bill.
Microsoft 365 security review & hardening
The features your licence already includes — MFA, conditional access, Defender, Intune — actually switched on, configured and monitored.
Because you told us: staff on personal and mobile devices make Intune and conditional access the controls that matter.
Managed IT with licensing included
For firms without an IT department: the licences, the security configuration and the support run as one service.
Because you told us: at your size this is usually one outsourced function, not three vendors.
Get your free licence review — engineer-led, usage-report-based
Send this to PTS and within two business days we'll come back to arrange a free licence review — your recommended mix validated against real usage reports, the overlaps found, and the changes timed to your renewal. Your team shape and answers are attached automatically.
The plans, decoded
Showing for On Business plans · 23 people · BYOD · apps alongsideSix SKUs cover almost every business. Two distinctions untangle most of the confusion: Office 365 vs Microsoft 365 (the latter adds the security and device layer — buy that one), and Business vs Enterprise (Business plans are capped at 300 seats and priced for SMEs; Enterprise plans have no cap and add depth). Prices are list, per user per month on annual commitment.
Business Basic
- Web and mobile Office, business email, Teams, 1TB OneDrive — no desktop apps
- The right licence for staff who live on a phone or shared PC
- No security stack — pair with Premium users, don't run a whole business on it
Business Standard
- Adds the desktop Office apps to Basic
- What many SMEs are on by default — productivity without the security layer
- The US$9.50 step to Premium buys Intune, EDR and conditional access: the best-value spend in the catalogue
Business Premium
- Standard + Intune, Defender for Business (EDR), Entra ID P1 conditional access, Defender for Office 365 P1
- The licence that decides whether an incident is an inconvenience or a disaster
- In several respects better defended out of the box than a plain E3 tenant
Microsoft 365 E3
- No seat cap, Windows Enterprise licensing, core Purview compliance (eDiscovery Standard, legal holds)
- What it lacks surprises people: no Defender for Office 365, no Defender for Endpoint P2, no Entra ID P2
- US$36 → US$39 since 1 July 2026
Microsoft 365 E5
- E3 + the full security suite, eDiscovery Premium, Entra ID P2, Teams Phone and Power BI
- Right for specific users with regulatory or security exposure — rarely the right blanket licence for an SME
- US$57 → US$60 since 1 July 2026
Microsoft 365 F3
- The frontline licence once you're past the Business plans: mobile Office, 2GB mailbox, Windows Enterprise
- US$8 → US$10 since 1 July 2026 — the steepest rise in the whole update (+25%)
- Under 300 seats, Business Basic at US$6 usually does the same job for less
User 301 needs an Enterprise or Frontline licence; the first 300 can stay exactly where they are. Growing firms usually add E3 seats past the cap rather than migrating everyone — at larger scale a uniform enterprise agreement can price better, but that's a negotiation, not a default.
Mixing — the optimisation most businesses miss
Premium + Basic
Business Premium for knowledge workers, Business Basic for frontline staff who need email and Teams on a phone. The commonest right answer under 300 seats — and often 30–40% cheaper than uniform Premium.
Premium + the exposed few up-tiered
E5 — or Business Premium with the E5 Security add-on — for the deal team, finance and compliance; Premium for everyone else. The audit answers live where the exposure lives, without buying them for the whole firm.
The full comparison — including when E3 and E5 genuinely earn their price — is in our guide: Business Premium vs E3 vs E5.
Licensing bought like it matters
- Tier-by-role mapping against your actual org chart, not a uniform default
- Renewal-timed changes so true-downs cost nothing and price locks land before increases
- One CSP relationship for licences, support and HKD billing
The security ladder
Showing for On Business plans · 23 people · BYOD · apps alongsideLicence tiers are really security tiers — the productivity apps barely differ. This table is the part that surprises people: a plain E3 tenant is thinner-defended than Business Premium, because Defender for Office 365 and endpoint EDR aren't in E3's box.
| Capability | Business Standard | Business Premium | E3 | BP + E5 Security | E5 |
|---|---|---|---|---|---|
| Conditional access & enforceable MFA (Entra ID P1) | — | Yes | Yes | Yes | Yes |
| Endpoint detection & response | — | Defender for Business | — | Defender for Endpoint P2 | Defender for Endpoint P2 |
| Advanced phishing & attachment protection | — | Defender for Office P1 | — | Defender for Office P2 | Defender for Office P2 |
| Device management (Intune) | — | Yes | Yes | Yes | Yes |
| Risk-based access & privileged identity (Entra ID P2) | — | — | — | Yes | Yes |
| eDiscovery & legal hold | — | Litigation hold | eDiscovery Standard | Litigation hold | eDiscovery Premium |
| Teams Phone & Power BI | — | — | — | — | Yes |
Every column above describes what you're entitled to run, not what's running. The most common finding in our Microsoft 365 security reviews is Business Premium or E5 estates with conditional access half-enforced, Defender policies on defaults and Intune enrolment optional — the expensive licence, defending nothing. Configuration is where the money you already spend starts working.
The quiet bargain: the E5 Security add-on
For Business Premium tenants, the E5 Security add-on (US$12/user/month) bolts the enterprise security stack onto the SME licence: Entra ID P2, Defender for Office 365 P2, Defender for Endpoint P2, Defender for Cloud Apps, Defender for Identity. That's US$34 all-in against E5's US$60 — the usual right answer for regulated SMEs that need E5-grade security without E5-grade everything. Cap and base-licence rules apply (it rides on Business Premium, so the 300-seat line still holds).
Deep-dive: Microsoft 365 security review & hardening.
Security you already pay for, switched on
- A Microsoft 365 security review against your actual licence tier — what's owned, what's on, what's exposed
- Conditional access, Defender and Intune configured and monitored, not just licensed
- The regulated-few design: E5 or the add-on exactly where audit exposure sits
Copilot: price it like a decision, not a vibe
Showing for On Business plans · 23 people · BYOD · apps alongsideCopilot is licensed on top of the plans — it never comes free inside one. The economics improved sharply this year for smaller firms, and the honest question isn't whether it saves time; it's whose time, and whether your tenant is safe to switch it on.
Work that lives in email, meetings and documents
Drafting, summarising long threads, meeting recaps, first-pass documents and spreadsheet questions. Leadership, client-facing and operations roles usually clear the 15-minute bar without noticing.
Frontline and single-system roles
Staff who live in one line-of-business app, a POS or a warehouse scanner get little from a licence that reads their (empty) mailbox. Buy Copilot by role, exactly like every other licence on this page.
Copilot surfaces whatever the user can technically open. In tenants with years of loose sharing, that includes the salary file and the deal folder. Run the oversharing check and fix the permission sprawl before the pilot — it's the difference between a productivity story and an incident.
The full decision framework is in our guide: Is Microsoft 365 Copilot worth it? — and our AI advisory practice runs the readiness work.
A Copilot rollout that survives contact
- The permissions and oversharing audit first — then Copilot, not the other way round
- Pilot design by role with before/after time measures, so renewal is a decision, not momentum
- Base-licence and tenant readiness handled as part of the same mix
Where the money leaks
Showing for On Business plans · 23 people · BYOD · apps alongsideSeven patterns account for nearly every oversized Microsoft bill we review. None of them needs a negotiation with Microsoft — just someone looking.
Everyone on the top tier
Uniform E3 or E5 "to keep it simple" is the most expensive simplicity in IT. Licensing is per-user: match the tier to the role and let the exposed few carry the expensive licences.
The leaver who never left
Licences that stay assigned after someone leaves — often for years. At E3's US$39 a seat, three forgotten leavers is a four-figure annual leak. Tie licence removal to the leaver checklist, not the renewal.
Paying twice for the same job
Zoom next to Teams, Dropbox next to OneDrive, Slack next to Teams, a paid e-signature or MFA app next to what the plan includes. Consolidation is usually the single biggest line in a rightsizing review.
Two phone bills
A separate PBX contract running alongside E5 licences whose Teams Phone nobody switched on — or the reverse, buying E5 for voice nobody moved. Pick one system and cancel the other.
Licensed shared mailboxes
Shared mailboxes, meeting rooms and scanner accounts don't need paid licences — but they quietly accumulate them, especially after migrations.
Office 365 when you meant Microsoft 365
The older Office 365 E-plans carry the apps without the security layer (Intune, Defender, conditional access). In 2026 there is rarely a good reason to be on them — same money, less defence.
The unused add-on shelf
Visio, Project, Power BI Pro, storage add-ons and trial upgrades that outlived the person or project that wanted them. The usage report finds them in ten minutes.
Not because Microsoft overcharges — because licence estates grow by accretion: every hire adds a seat, every project adds a tool, and nothing removes anything. The review is subtraction: leavers, duplicates, wrong tiers, dead add-ons. It's the first thing we look at in an advisory engagement, and the savings recur monthly.
The subtraction, done for you
- Usage-report analysis: every licence against its last-activity date
- Overlap map: what your other paid apps duplicate inside the plans you own
- Changes executed at renewal so true-downs cost nothing
The questions we're actually asked
Short, factual answers to the licensing questions that reach our inbox — figures current at 26 August 2026.
Which Microsoft 365 plan do most Hong Kong SMEs actually need?
Business Premium, in most cases under 300 staff: it bundles the desktop Office apps with the security stack that matters day to day — Intune device management, Defender for Business EDR, conditional access, phishing protection — at US$22 per user. The common mistakes are sitting on Business Standard without the security layer, or paying for E3 and getting less protection than Premium would have given.
What's the difference between Office 365 and Microsoft 365?
Office 365 plans are the productivity apps and services only; Microsoft 365 plans add the security and device-management layer — Entra ID, Intune, Defender — and, on enterprise plans, Windows Enterprise licensing. In 2026 there's rarely a good reason to buy the older Office 365 E-plans: the security layer is where the value sits.
Can we mix licence types in one tenant?
Yes — licensing is per-user and mixing is normal good practice: Business Basic for frontline staff, Business Premium for knowledge workers, E5 (or the E5 Security add-on) only for users with real exposure. The 300-seat cap applies to Business-plan seats, not the tenant. Rightsizing along these lines commonly cuts 10–30% from the Microsoft bill.
What happens when we pass 300 people?
The Business plans are hard-capped at 300 seats. Beyond that, additional users need Enterprise (E3/E5) or Frontline (F3) licences. Existing Business-plan users can stay as they are, so growing firms usually add E3 seats past 300 rather than migrating everyone — though at larger scale a uniform enterprise agreement can price better.
Is E5 worth it?
As a blanket licence for an SME, rarely — US$60 per user buys advanced security, eDiscovery Premium and Teams Phone that most people never touch. It's worth it for specific user groups, or where it replaces a separate phone system, BI tool and EDR platform at once. For smaller firms the E5 Security add-on on Business Premium — US$12 for the E5 security stack, US$34 all-in versus US$60 — is often the smarter route.
What changed in the July 2026 price increase?
On 1 July 2026 Microsoft raised enterprise list prices: E3 from US$36 to US$39, E5 from US$57 to US$60, and F3 from US$8 to US$10 — the steepest rise at 25%. The Business plans (Basic, Standard, Premium) were unchanged. Existing annual terms keep their price until renewal, which makes the month before your renewal the time to rightsize.
How much is Copilot, and what does it need underneath?
For organisations up to 300 seats, Microsoft 365 Copilot Business lists at US$21 per user per month (the US$18 promotion ended 30 June 2026); the enterprise price is US$30. It sits on top of a qualifying base licence — Business Standard, Business Premium, E3 or E5. At Hong Kong salaries it breaks even at roughly 15 minutes saved a week, but only for users whose work lives in email, meetings and documents — and only in a tenant whose permissions are clean enough to switch it on safely.
Do these prices include Teams?
For most existing subscriptions, yes. Since 2024, new enterprise subscriptions are often sold with Teams unbundled — an E3/E5 "no Teams" SKU plus a separate Teams Enterprise add-on — so a new-customer CSP quote may show two lines where an old one showed one. The totals land close; just compare like with like when weighing quotes.
We're on Google Workspace — is it worth switching?
It depends what you're buying. If the pull is Teams, the Office desktop apps, or the Business Premium security stack (Intune, Defender, conditional access under one licence), the move usually pays for itself in consolidated tooling. If Workspace is working and none of that calls, there's no compliance reason to move — Hong Kong doesn't mandate either. When you do migrate, mail, files and identity move cleanly with planning.
Do we need to buy backup separately?
Make it a conscious decision. Microsoft's retention and recycle bins protect against some deletion, but they are not backup: ransomware, malicious deletion and sync accidents can outrun them. Third-party Microsoft 365 backup is cheap relative to the data it protects; the failure mode isn't buying it or not — it's assuming you have it when you don't.
Why buy through a CSP partner instead of a credit card?
CSP buying gets you HKD billing, the ability to mix annual commitment (cheaper) with monthly seats (flexible, for temps and uncertainty), and a local human to call when licensing breaks — for the same list price. PTS buys as a Microsoft partner/CSP, so licensing, support and the monthly bill come through one point of contact.
Ask us the one that isn't here
- A thirty-minute conversation with an engineer who licenses and runs these tenants every week — not a sales call
- The answer is usually a short list of what to check first
Sources
- Microsoft, Microsoft 365 for business — plan comparison and pricing (Basic, Standard, Premium; the 300-seat cap).
- Microsoft, Microsoft 365 enterprise plans and pricing (E3, E5, F3).
- 1 July 2026 list-price increase (E3 US$36→39, E5 US$57→60, F3 US$8→10; Business plans unchanged): summaries by SAMexpert and ProArch.
- Microsoft 365 E5 Security add-on for Business Premium (US$12/user/month: Entra ID P2, Defender for Office 365 P2, Defender for Endpoint P2, Defender for Cloud Apps, Defender for Identity): Microsoft documentation.
- Microsoft, Microsoft 365 Copilot plans — Copilot Business (≤300 seats) US$21/user/month since the promotional price ended 30 June 2026; enterprise US$30.
- PTS guides: Business Premium vs E3 vs E5 — which licence do you need? · Is Microsoft 365 Copilot worth it? · Microsoft 365 in China (21Vianet) · Microsoft 365 setup · Microsoft 365 security · IT procurement.
The Microsoft 365 Plan Picker is a licensing reference prepared by PTS Managed Services Limited, an independent Microsoft partner/CSP. Prices shown are Microsoft's public list prices (USD, annual commitment) as at 26 August 2026 and change over time; HKD figures are orientation only. This is guidance, not a quote or an offer — actual pricing depends on your CSP agreement and Microsoft's current price list. Microsoft, Microsoft 365, Teams and Copilot are trademarks of Microsoft Corporation; PTS is not affiliated with or endorsed by Microsoft beyond its partner status.