Microsoft 365 A3 + E3 Mobility v Microsoft 365 A5 + E5 Mobility

Adapted from https://www.microsoft.com/en-us/education/buy-license/microsoft365/default.aspx, see source for additional details.

Microsoft 365 A3 Microsoft 365 A5
Collaboration & Learning Office Online: web-based document editing X X
Office client applications: Word, Excel, PowerPoint, Outlook X X
Email and calendar, instant messenger (IM), persistent chat, Yammer X X
Files and content management: file storage, sharing, information discovery, Groups, Planner X X
Minecraft: Education Edition with Code Builder X X
Classroom Tools Microsoft Teams with classroom experiences, professional learning communities (PLC), and staff teams X X
OneNote Class Notebook, Sway X X
More inclusive classrooms Learning Tools, Accessibility Checker, Office Lens X X
Voice, video & meetings Skype for Business X X
PSTN (public switched telephone network) Conferencing, Cloud PBX (private branch exchange) X
Compliance Legal Hold, eDiscovery search and export X X
Advanced eDiscovery, Customer Lockbox, Advanced Data Governance X
Analytics Delve X X
Power BI Pro, MyAnalytics X
Management & Security Intune for Education X X
School Data Sync, Data Loss Prevention, Office 365 Rights Management X X
Office 365 A3: Advanced Security Management, Skype Meeting Broadcast X X
Enterprise Mobility Suite (EMS) A3: Intune for Education, Azure Active Directory P1, Azure Information Protection P1, Advanced Threat Analytics X X
Windows 10 Education A3: Windows Defender Antivirus, Device Guard X X
Advanced Security Office 365 A5: Advanced Threat Prevention, Threat Intelligence X
Enterprise Mobility Suite (EMS) A5: Azure Active Directory P2, Azure Information Protection P2, Cloud App Security X
Windows 10 Education A5: Windows Defender Advanced Threat Protection X
Server & CAL Benefits Productivity Server Licenses and Client Access Licenses (CALs) for Exchange, SharePoint, Skype for Business, etc. X X
Windows Server Client Access Licenses (CALs) X X
System Center Configuration Manager CML X X
System Center Endpoint Protection X X

E3 vs E5 comparison

Adapted from https://www.microsoft.com/en-us/cloud-platform/enterprise-mobility-security-pricing, see source for additional details

E3 Mobility

E5 Mobility
Identity and access management 

Simplified access management and security
Centrally manage single sign-on across devices, your datacenter, and the cloud.

X

X

Multi-factor authentication
Strengthen sign-in authentication with verification options, including phone calls, text messages, or mobile app notifications, and use security monitoring to identify inconsistencies.

X

X

Conditional access
Define policies that provide contextual controls at the user, location, device, and app levels to allow, block, or challenge user access.

X

X

Risk-based conditional access
Protect apps and critical data in real time using machine learning and the Microsoft Intelligent Security Graph to block access when risk is detected.

 

X

Advanced security reporting
Monitor suspicious activity with reporting, auditing, and alerts, and mitigate potential security issues using focused recommendations.

X

X

Privileged identity management
Provide timely, on-demand administrative access to online services with access-related reporting and alerts.

 

X

Windows Server Client Access License (CAL)*
Provide each user access to server functions from multiple devices for a single fee.

X

X
Managed mobile productivity

Mobile device management
Enroll corporate and personal devices to provision settings, enforce compliance, and protect your corporate data.

X

X

Mobile application management
Publish, configure, and update mobile apps on enrolled and unenrolled devices, and secure or remove app-associated corporate data.

X

X

Advanced Microsoft Office 365 data protection
Extend management and security capabilities across users, devices, apps, and data, while preserving a rich, productive end-user experience.

X

X

Integrated PC management
Centralize management of PCs, laptops, and mobile devices from a single administrative console, and produce detailed hardware and software configuration reporting.

X

X

Integrated on-premises management
Extend your on-premises management to the cloud from a single console with Microsoft System Center Configuration Manager
and Microsoft System Center Endpoint Protection integration for enhanced PC, Mac, Unix/Linux server, and mobile device administration.

X

X
Information protection

Persistent data protection
Encrypt sensitive data and define usage rights for persistent protection regardless of where data is stored or shared.

X

X

Intelligent data classification and labeling
Configure policies to automatically classify and label data based on sensitivity and then apply persistent protection.

 

X

Document tracking and revocation
Monitor activities on shared data and revoke access in case of unexpected events.

X

X

Encryption key management per regulatory needs
Choose default key management options or deploy and manage your own keys to comply with regulations.

X

X
Identity-driven security

Microsoft Advanced Threat Analytics
Detect abnormal behavior in on-premises systems and identify advanced targeted attacks and insider threats before they cause damage.

X

X

Microsoft Cloud App Security
Gain visibility, control, and protection for your cloud-based apps, while identifying threats, abnormal usage, and other cloud security issues.

 

X

Azure Advanced Threat Protection
Detect and investigate advanced attacks and suspicious behaviors on-premises and in the cloud.

 

X