Microsoft 365 is the most over-paid and under-paid software bill in the average small-business stack. The over-payers buy Business Premium for every employee because the IT vendor said "you want the secure one" — even the seasonal front-desk hire who only needs email and Word. The under-payers run the entire company on Business Basic and have no Defender, no Intune, no conditional access, and no real way to wipe a lost laptop. Both end up paying more than they should — one in subscription costs, the other in breach cost. This post is the decision framework we walk every new client through before we touch a single license assignment.
$27
Business Premium per user / month
$7.50
Business Basic per user / month
$234
Annual delta per user (Basic vs Premium)
60%+
Of SMBs we audit are mis-licensed
The Four SMB Licenses You Actually Need to Compare
Microsoft publishes 30+ Microsoft 365 SKUs. For a North Central Florida small business under 300 employees, the decision almost always comes down to these four:
Business Basic
$7.50/user/mo
Email, OneDrive, SharePoint, Teams, browser-only Word/Excel/Outlook. No desktop apps, no Defender, no Intune. Good for kiosks, shared front-desk accounts, and seasonal workers who only need email and basic productivity in a browser.
Business Standard
$15/user/mo
Everything in Basic plus full desktop Word, Excel, PowerPoint, Outlook, and Publisher. Still no Defender for Business, no Intune, no conditional access. This is where most older SMB tenants are sitting today.
Business Premium
$27/user/mo
Everything in Standard plus Defender for Business (endpoint detection & response), Intune (mobile + desktop management), Azure AD Premium P1 (conditional access), and Information Protection. This is the SMB security floor in 2026.
Microsoft 365 Apps for Business
$8.25/user/mo
Desktop Office apps + 1 TB OneDrive, no email, no Teams. Useful when employees already have email elsewhere but need Office on the desktop — rare in practice.
// Pricing Note
Prices shown are list (annual-commitment) MSRP as of mid-2026. Microsoft routinely adjusts pricing — in 2024 Business Premium increased from $22 to $27, and there are typically additional uplifts for monthly-billing terms. Your actual price through a Cloud Solution Provider (CSP) may differ. Always verify in your Microsoft Admin Center under Billing → Purchase services.
The Decision Tree — Which License Does Each Person Actually Need?
Right-sizing is per-person, not per-company. The right answer for the owner is rarely the right answer for the front-desk receptionist. Walk every named user through these four questions:
Does this person handle regulated data (PHI, FTC-Safeguards-covered customer data, attorney-client privileged matter)?
Yes → Business Premium is the floor. The Defender, Intune, and conditional-access stack is what makes Microsoft's standard HIPAA BAA actually defensible. No → continue.
Does this person work from a company-issued device that needs to be remotely managed, encrypted, or wiped?
Yes → Business Premium. Intune is the management plane. Without it your lost-laptop response is a Best Buy receipt and a prayer. No → continue.
Does this person need the full desktop Office apps (Outlook, Word, Excel, PowerPoint)?
Yes → Business Standard at minimum. No → Business Basic is sufficient.
Is this person a kiosk, shared front-desk, or seasonal account who only needs email and browser-based productivity?
Yes → Business Basic. This is the right answer for shift-shared front-desk roles, seasonal hires, and read-only mailboxes.
The Most Common Mis-Licensing Patterns
01
Premium across the board
Every user on Business Premium because someone said "just get the secure one." The seasonal front-desk hire who only checks email does not need Defender. A 20-person firm with 5 kiosk/shared/seasonal accounts often saves $700-$1,000 per year here without losing any meaningful security.
02
Standard across the board, no security floor
Everyone on Business Standard, including the owner, the controller, and the regulated-data users. No Defender, no Intune, no conditional access — meaning the standard Microsoft BAA is technically in place but the technical safeguards underneath are missing. The savings of $9.50/user/mo evaporates on the first incident.
03
Mixed licenses with no management plane
Half on Premium, half on Standard, no Intune policies, conditional access unconfigured. The licenses are purchased but the features are never turned on — meaning the company is paying for Premium and getting Standard. This is the most expensive of the three patterns.
04
Stale licenses for former employees
We routinely find 5-15% of paid licenses still assigned to people who left months ago. A 30-person firm paying for 3 ghost Premium licenses is bleeding $66/month / $792/year, every year. Quarterly license audits eliminate this.
What Business Premium Actually Buys You (and Why It Pays Back)
The Premium tier is the SMB security floor in 2026 for any user with regulated data, company devices, or administrative access. Specifically, the upgrade from Standard ($15) to Premium ($22) adds:
Defender for Business
Endpoint detection & response on every Windows and Mac device. Cuts the time to detect ransomware from days to minutes. Replaces consumer antivirus.
Intune Device Management
Remote management of company workstations and phones. Push security baselines, enforce encryption, wipe a lost device, control which apps can be installed.
Azure AD Premium P1 / Conditional Access
'Block sign-in from countries we never operate in,' 'require MFA when the user is on a personal device,' 'block legacy authentication.' This is where MFA becomes truly enforceable.
Microsoft Information Protection
Auto-classify and protect emails and documents containing PHI, PCI, SSNs, or company-defined sensitive data. Critical for regulated industries.
Defender for Office 365 Plan 1
Safe Attachments and Safe Links protection on email — sandboxes attachments and rewrites URLs to detonate links before the user clicks. The single highest-impact email control for SMBs.
"Business Premium is not expensive. Buying Premium and never turning on Intune, conditional access, or Defender — that is expensive. You are paying for a security stack and getting a productivity suite."
Steve Condit, Simply IT
What Business Standard or Basic Is Genuinely Right For
Right-sizing is not always upward. There are real seats where Basic or Standard is the correct answer:
Front-desk shared mailbox checked from a kiosk on a managed device — Business Basic on the user, Premium on the kiosk if it is company-issued
Seasonal hire who only needs email and browser productivity for 90 days — Business Basic
Field crew using personal phones for email only, with no clinical or financial data — Business Basic with Exchange-only ActiveSync policies
Read-only role mailboxes (info@, billing@, support@) — Exchange Online Plan 1 only, no full M365 license required
Conference room display account or shared device sign-in — Business Basic
The Annual License Audit — Five Items, One Hour
Every Florida business we manage runs through this audit once a year. For a 20-person firm it usually finds $1,500 to $3,500 in annual savings without losing a single security feature:
Pull the assigned-licenses report from Microsoft Admin Center — one click, exported to CSV
Match the named user list against the current employee roster — remove every license assigned to someone no longer with the company
Reclassify every active user against the four-question decision tree above
Check whether Premium features (Intune enrollment, conditional access, Defender deployment) are actually in use for every Premium-licensed user
Document the new license assignment, schedule the change at the next renewal anniversary to avoid mid-term cancellation fees
How Simply IT Handles M365 Licensing for SMB Clients
As a Microsoft Cloud Solution Provider (CSP), we resell and manage Microsoft 365 licenses for clients across North Central Florida — Ocala, The Villages, Gainesville, Belleview, Dunnellon, and beyond. We do the right-sizing audit at onboarding and again every 12 months, configure Intune and conditional access baselines so the Premium licenses are actually doing the work, and we hold the BAA where regulated industries require it. The goal is not to maximize your license bill — it is to make every dollar of M365 spend buy you the security and productivity you actually need.
// Key Takeaway
Microsoft 365 licensing is a per-person decision, not a per-company decision. Run the four-question decision tree on every named user, audit annually, and turn on the Premium features you are already paying for. Most SMBs we audit are paying for the wrong mix — and fixing it usually saves money and tightens security at the same time.
Founder & Owner, Simply IT · US Marine Veteran · 30+ Years IT Experience
Steve Condit founded Simply IT to bring enterprise-grade IT management to small and mid-sized businesses across North Central Florida. With over 30 years of IT experience and a background in the US Marine Corps, Steve built Simply IT around the principle that local businesses deserve the same quality of technology partnership that large companies take for granted — without long-term contracts or national call center support.
