Windows
Windows editions and Windows 365 Cloud PC licenses in two separate tables.
Windows editions
| Feature | Windows 11 Pro | Windows 11 Enterprise E3Per user, on top of Pro | Windows 11 Enterprise E5Per user, on top of Pro |
|---|---|---|---|
| Security | |||
| Credential Guard[1]Protection against credential theft and pass-the-hash attacks | – | ||
| Personal Data Encryption[1]Encrypting user content with Windows Hello for Business keys | – | ||
| App Control for Business[2] | |||
| AppLocker[2] | – | ||
| Defender for Endpoint[1] | – | – | Plan 2 |
| Management and services | |||
| Windows Autopatch[1]Automation of Windows, Microsoft 365 Apps, Edge and Teams updates | – | ||
| Universal Print[3]Monthly jobs per license added to the tenant pool. Microsoft 365 E3/E5 licenses add 100 jobs. | – | 5 jobs | 5 jobs |
| Kiosk and shell customization[1]Shell Launcher, Unified Write Filter | – | ||
| Organizational messages[1]Showing corporate announcements in the Windows interface | – | ||
| 36 months of feature update support[1] | – | ||
| LTSC use rights[1] | – | ||
| Microsoft Desktop Optimization Pack (MDOP)[1] | – | ||
| Rights | |||
| 5 Windows installations per user[1] | – | ||
| Azure Virtual Desktop, Windows 365 Enterprise and VDA access rights[1]Including FSLogix | – | ||
Windows 365 (Cloud PC)
| Feature | Windows 365 BusinessUp to 300 users | Windows 365 EnterpriseNo user limit | Windows 365 FlexFormerly Frontline |
|---|---|---|---|
| License | |||
| Users per license[5] | 1 | 1 | 3, not concurrent |
| Prerequisite license[6]Windows Enterprise E3, Intune and Entra ID P1 | – | ||
| Management[6] | Windows 365 portal | Intune | Intune |
| Windows Hybrid Benefit discount[5]For Windows Pro license holders | – | – | |
- Included
- Available as add-on
- Not confirmed in official sources
- Not included
- Windows Enterprise E3 and E5 come with the Microsoft 365 E3 and E5 plans. They are sold as per-user subscriptions and require Windows Pro on the device as a prerequisite.
- Windows Enterprise E3 in Microsoft 365 F3 does not include MDOP, Windows LTSC Enterprise or Windows Autopatch.
- A user licensed for Windows Enterprise E3 can use cloud services such as Autopatch and Universal Print even on a Windows Pro device not upgraded to Enterprise; Credential Guard and Personal Data Encryption, however, require the Enterprise edition on the device.
- Windows 365 Frontline was renamed Windows 365 Flex from September 3, 2026; functionality and licensing did not change.
- Per-device Windows Enterprise (volume license + Software Assurance) grants rights to 4 virtual operating system installations on the licensed device.
Sources
- Windows commercial licensing overview
- Windows security features licensing and edition requirements
- Get access to Universal Print
- Azure Virtual Desktop prerequisites
- Windows 365 licensing FAQ
- Windows 365 FAQ
- Partner Center announcements, August 2026
Last updated: 16 October 2026