Microsoft 365 Frontline All
Highlight
Draw
Text
Image
Link
Notes
Feature Map
Save
Export
Brightness
Contrast
Hue
Saturation
Reset
Save
Microsoft 365 F5 Security + Compliance Add-on
Microsoft 365 F5 Security + Compliance Add-on
Enterprise Mobility + Security
(EMS)
Windows Enterprise
Office 365
Microsoft 365 Frontline
July 2023
m365maps.com
Microsoft 365 F3
Microsoft 365 F3
Microsoft 365 F3 includes EMS E3
Microsoft 365 F1
Microsoft 365 F1
Microsoft 365 F1 includes EMS E3
Microsoft 365 F1 does not include Windows
Application
Guard for
Office
ID Protection
Privileged
Identity
Management
Access
Reviews
Risk-Based
Conditional
Access
Entitlement
Management
Defender for
Cloud Apps
Entra ID Plan 2 Step-up
Defender for
Identity
Defender for Endpoint Plan 2
Microsoft 365 F3 includes Windows Enterprise E3
except
for Autopatch, Long Term Servicing Channel (LTSC), and
Microsoft Desktop Optimization Pack (MDOP) features
Microsoft 365 F5 Security
Microsoft 365 F5 Security
Microsoft 365 F5 Compliance
Microsoft 365 F5 Compliance
Exchange
Online
Archiving
Enterprise Mobility + Security
(EMS)
Windows Enterprise
Office 365
Data Loss
Prevention
Retention
Policies
Exchange
Online
Protection
Microsoft
Teams
Exchange
Online Kiosk
(2 GB)
OneDrive for
Business
(2 GB)
Power
Automate for
Office 365
(2,000 st/day)
Kaizala Pro
(retiring)
Power Apps
for
Office 365
Microsoft
Forms
SharePoint
Online Kiosk
Stream
(consume)
Planner
Sway
Microsoft
Dataverse
for Teams
Microsoft
To Do
Power Virtual
Agents for
Teams
Microsoft
Whiteboard
Retention
Labels
Information
Protection
for M365
(from EMS E3)
Bookings
Microsoft
Teams
SharePoint
Online Kiosk
Stream
(consume)
Planner
Sway
Microsoft
Forms
(consume)
Office
for the Web
(read
-only)
Exchange
Online Kiosk
(calendar)
Information
Protection
for M365
(from EMS E3)
Bookings
OneDrive for
Business
(2 GB)
Viva
Connections
Viva
Learning
(basic)
Viva
Connections
Viva
Learning
(basic)
Message
Encryption
(basic)
(from EMS E3)
Defender for Office 365 Plan 2
Threat
Trackers
Attack
Simulation
Training
Threat
Explorer
Automated
Investigation
& Response
Safe Links
Safe
Attachments
Advanced
Anti
-
Phishing
Defender for Office 365 Plan 1
Compromised
User
Detection
Campaign
Views
Real-Time
Reports
Exchange
Online
Protection
Audio
Conferencing
(free add
-on)
Audit
(standard)
Alert
Policies
Audit
(standard)
Alert
Policies
Insider Risk
Management
Information Protection &
Governance
Insider Risk
Management
Trainable
Classifiers
Endpoint
DLP
eDiscovery &
Audit
Defender for
Cloud Apps
Customer
Key
Teams
Data Loss
Prevention
Message
Encryption
(advanced)
Records
Management
Double Key
Encryption
Customer
Lockbox
Information
Barriers
Comm
Compliance
eDiscovery
(premium)
Audit
(premium)
Data
Lifecycle
Management
Privileged
Access
Management
Rules-Based
Classification
(Office 365)
Rules-Based
Classification
(Client &
Scanner)
Audio
Conferencing
(free add
-on)
Exact Data
Match
Viva
Engage
Viva
Engage
Advanced
Hunting
Endpoint
Detection &
Response
Endpoint
Attack
Notifications
Evaluation
Lab
MIP
Integration
Vulnerability
Management
(core)
Threat
Analytics
Defender for
Cloud Apps
Integration
6-Months
Searchable
Data
Enhanced
ASR
Tamper
Protection
Block at
First Sight
Web Content
Filtering
Cross-
Platform
Support
Centralized
Management
Manual
Response
Actions
Compliance
Manager
Secure
Score
Adoption
Score
Activity
Reports
Adoption
Score
Activity
Reports
Compliance
Manager
Secure
Score
Limitations:
No productivity server access, No desktop Outlook access, No voicemail
FastTrack helps customers deploy Microsoft 365.
Customers with 150+ eligible licenses can use FastTrack at no
additional cost for the life of their subscription.
FastTrack
Microsoft 365 Frontline Benefits
MFA
Registration
Policy
Microsoft
Lists
Microsoft
Lists
Basic
Mobility &
Security
Entra ID for
Office 365
Project &
Roadmap
View Access
Basic
Mobility &
Security
Entra ID for
Office 365
Microsoft
Search
Microsoft
Search
3x Premium
& Custom
Compliance
Templates
3x Premium
& Custom
Compliance
Templates
3x Premium
& Custom
Compliance
Templates
Attack
Surface
Reduction
Windows
Conditional
Access
Windows
Information
Protection
(retiring)
Windows
Update for
Business
Windows
Hello for
Business
Cortana
Application
Guard
Defender
Antivirus
AppLocker
Windows
Virtualization
Rights
DirectAccess
BranchCache
Credential
Guard
Always On
VPN
Universal
Print
App Assure
Windows
Firewall
Application
Control
Resilient File
System
(ReFS)
SMB Direct
Unified Write
Filter
Persistent
Memory
Manage by
MDM
Power
Automate
Attended
Desktop Flows
Edge for
Business
Custom
Logon
Keyboard
Filter
Custom
Shell
Unbranded
Boot
36 months
support for
Windows 11
Assigned
Access
Message
Encryption
(basic)
(from EMS E3)
Domain Join
BitLocker
Entra ID Join
BitLocker to
Go
Microsoft
365 Mobile
App
Office
for the Web
(incl Visio)
Advanced
Threat
Analytics
(retiring)
Information
Protection
Windows
Server CAL
Rights
Config
Manager
Endpoint
Protection
Active
Directory
RMS
Azure
RMS
Intune Plan 1
Application
Management
Device
Management
Config
Manager
Endpoint
Analytics
Next Gen
Protection
Mobile
Threat
Defence
Microsoft
365 Mobile
App
(read
-only)
Automated
Investigations
Entra ID Plan 1
Advanced
Threat
Analytics
(retiring)
Information
Protection
Windows
Server CAL
Rights
Config
Manager
Endpoint
Protection
Active
Directory
RMS
Azure
RMS
Intune Plan 1
Application
Management
Device
Management
Config
Manager
Endpoint
Analytics
Advanced
Security
Reports &
Alerts
Single-Sign-
On to other
SaaS
App Proxy,
including
PingAccess
Multi-Factor
Auth (MFA)
Entra ID
Connect
Health
Cloud App
Discovery
Shared
Account
Password
Roll
-Over
Self-Service
Password
Reset in AD
Self-Service
Group
Management
Conditional
Access
External ID
Enterprise
State
Roaming
Terms of
Use
Password
Protection
Microsoft
Identity
Manager
3rd Party
MFA
Integration
Administrative
Units
Dynamic
Groups
SMS Sign-In
Temporary
Access Pass
Customized
Sign
-In Page
Self-Service
Activity
Reports
Service
Level
Agreement
Custom
Security
Attributes
Passwordless
Authentication
Verified ID
Entra ID Plan 1
Advanced
Security
Reports &
Alerts
Single-Sign-
On to other
SaaS
App Proxy,
including
PingAccess
Multi-Factor
Auth (MFA)
Entra ID
Connect
Health
Cloud App
Discovery
Shared
Account
Password
Roll
-Over
Self-Service
Password
Reset in AD
Self-Service
Group
Management
Conditional
Access
External ID
Enterprise
State
Roaming
Terms of
Use
Password
Protection
Microsoft
Identity
Manager
3rd Party
MFA
Integration
Administrative
Units
Dynamic
Groups
SMS Sign-In
Temporary
Access Pass
Customized
Sign
-In Page
Self-Service
Activity
Reports
Service
Level
Agreement
Custom
Security
Attributes
Passwordless
Authentication
Verified ID
LAPS
Content
Search
Limitations:
No productivity server access, No desktop Outlook access
Content
Search
eDiscovery
(standard)
App
Governance
App
Governance
Teams DLP
& Export
Graph API
Windows
Autopilot
Windows
Autopilot