Most organizations already have it. Advanced Intune capabilities are included in Microsoft 365 E3 at $39.00 per user per month and E5 at $60.00, and Microsoft’s own pricing page tells buyers to check that before anything else.
Intune Plan 2 is $4.00 as an add-on and five more add-ons run $2.00 to $5.00. Intune Plan 1, the base service, has no published price at all. Every figure carries the qualifier that prices vary by Microsoft agreement.
- Included in Microsoft 365 E3 at $39.00 and E5 at $60.00
- Intune Plan 2: $4.00 per user per month, additive to Plan 1
- Add-ons: $2.00 to $5.00 per user per month each
- Intune Plan 1 alone: no published figure
- Kiosks and shared devices: a device-only license, without Conditional Access
Read at the vendor’s own pricing page, read at the Microsoft Intune pricing page and Microsoft Learn on September 10, 2026, with the pricing page, the licensing article and the service overview read again on September 23, 2026. Nothing here comes from a reseller, a competitor’s comparison table or an estimate. How we rank software
PublishedWhat the vendor publishes
| What you buy | Price | Annual | Notes |
|---|---|---|---|
| Microsoft 365 E3 | $39.00 per user / mo | Paid yearly | Advanced Intune capabilities included. $30.45 without Teams |
| Microsoft 365 E5 | $60.00 per user / mo | Paid yearly | Includes everything in E3. $51.45 without Teams |
| Intune Plan 2 | $4.00 per user / mo | Paid yearly | Additive to Plan 1. Specialty, shared and edge devices |
| Intune Plan 1 | Not published | Not published | The base service has no figure on the pricing page |
Microsoft’s Intune pricing page publishes ten figures. Not one of them is Intune Plan 1, which is the base service the whole product rests on.
What is being priced is a cloud-based endpoint management service. Microsoft describes Intune as securing and managing an organization’s devices and apps: enroll, configure, secure and update devices, deploy and protect apps, and control which users and devices reach organization resources.
Here is what is actually priced there, read on September 10, 2026:
| What is priced | Per user, per month, paid yearly | What it is |
|---|---|---|
| Microsoft 365 E5 | $60.00 | A Microsoft 365 bundle |
| Microsoft 365 E5, no Teams | $51.45 | The same bundle without Teams |
| Microsoft 365 E3 | $39.00 | A Microsoft 365 bundle |
| Microsoft 365 E3, no Teams | $30.45 | The same bundle without Teams |
| Advanced Analytics | $5.00 | Add-on |
| Intune Plan 2 | $4.00 | Add-on, additive to Plan 1 |
| Remote Help | $3.50 | Add-on |
| Endpoint Privilege Management | $3.00 | Add-on |
| Enterprise Application Management | $2.00 | Add-on |
| Microsoft Cloud PKI | $2.00 | Add-on |
| Intune Plan 1 | Absent | The base service |
Four bundles and six things sold on top of a plan whose own price is not on the page. That is not an oversight, and Microsoft’s own documentation explains it in one sentence: most organizations get Intune as part of a Microsoft 365 bundle (such as Microsoft 365 E3, E5, or E7) rather than buying these plans directly.
So the Intune Plan 1 price is the gap in the middle of the list, and it is the number most searches are after. It is not in a footnote either. It comes from a quote.
So the first question is not what it costs
It is whether you are already paying for it, and Microsoft says so on the pricing page itself: most organizations should first check their existing Microsoft 365 E3 or E5 license. Advanced Intune capabilities are included in both, a change Microsoft dates to July 2026 in its own blog and to CY26 Q3 on the pricing page.
If your business pays $39.00 a user a month for E3, endpoint management is in that bill whether or not anybody has switched it on. The useful exercise before reading any further is to open the licensing page in your own tenant and find out.
Intune for Education follows the same pattern: Plan 1 for Education is included in Microsoft 365 Education A3 and A5.
Three plans, and how they stack
Microsoft Learn sets out the structure more plainly than the pricing page does.
| Plan | What it is | Published price |
|---|---|---|
| Intune Plan 1 | The base service | Not on the pricing page |
| Intune Plan 2 | Additive to Plan 1. Specialty devices, shared devices, complex edge scenarios | $4.00 per user per month |
| Intune Suite | Additive to Plan 1. Unifies the advanced capabilities and includes Plan 2 | Not on the pricing page |
The word to notice is additive. Plan 2 and the Suite sit on top of Plan 1 rather than replacing it, so any comparison that treats them as tiers is understating the bill. And since the Suite includes Plan 2, buying both is buying one of them twice.
The billWhat moves the number, and what is not on it
Three things move an Intune bill, and only one of them is on the pricing page.
Which bundle you already hold. The dominant variable by a wide margin. E3 at $39.00 and E5 at $60.00 both include advanced Intune capabilities, so for most organizations the marginal cost of Intune is zero and the question is which add-ons are missing.
Which add-ons you need. For organizations not on E3 or E5, the advanced pieces are sold individually on top of Plan 1: Advanced Analytics $5.00, Plan 2 $4.00, Remote Help $3.50, Endpoint Privilege Management $3.00, Enterprise Application Management $2.00 and Cloud PKI $2.00, all per user per month paid yearly.
Take four of those and you have added $12.50 a user a month to a plan whose price is not published.
Your agreement. Every figure on the page carries the same qualifier underneath it: Prices may vary based on your Microsoft agreement. Contact Sales for a customized quote. That is why this page scores Microsoft 3 out of 5 on pricing clarity rather than 5. A number you cannot rely on is better than no number and worse than a price list.
How much does Intune cost without Microsoft 365 E3 or E5
This is the case the pricing page is built for. Microsoft describes the standalone products as things you add on to Intune Plan 1 for organizations that do not subscribe to Microsoft 365 E3 or E5, which is the same sentence that makes the missing Intune Plan 1 price awkward.
So the honest answer has two halves. The add-ons are priced, in public, per user per month paid yearly. The base they attach to is quoted. Anyone budgeting from this page alone can total the add-ons and still knows nothing about the floor underneath them.
What each add-on actually is
The pricing page gives each add-on one line, and that line is the only official description most buyers ever read. They are worth putting next to the prices.
| Add-on | Per user, per month | What Microsoft says it does |
|---|---|---|
| Advanced Analytics | $5.00 | Proactive endpoint analytics, anomaly detection and granular insights, to improve the end user experience |
| Intune Plan 2 | $4.00 | Advanced protection for specialty devices, shared devices and complex edge scenarios |
| Remote Help | $3.50 | Secure helpdesk support and simplified assistance to workers |
| Endpoint Privilege Management | $3.00 | Privilege elevation and endpoint configuration managed in one place |
| Enterprise Application Management | $2.00 | App discovery, deployment and updates from a securely hosted app catalog |
| Microsoft Cloud PKI | $2.00 | Automated certificate lifecycle management for all devices, replacing an on-premises PKI |
One line in the documentation is worth checking before buying any of them. Microsoft Learn describes Intune Plan 2 as additive to Plan 1, with advanced endpoint management capabilities including Remote Help and Advanced Analytics.
Those two are also sold on their own, at $3.50 and $5.00. If that description is exact, Plan 2 at $4.00 is the cheaper route to both. The pricing page describes Plan 2 differently, in terms of specialty and shared devices, so get the answer in writing before you buy either.
Intune license cost, and the Entra bill behind it
Intune does not store identities or authenticate anybody. Microsoft Learn puts it plainly: Intune relies on Microsoft Entra ID for authentication, for the security groups that policies, profiles and apps are assigned to, and for Conditional Access, which is where device compliance turns into an access decision.
That has a licensing consequence the pricing page does not carry. Unlicensed admin access, below, does not replace license requirements for other services, and Microsoft states that features depending on Microsoft Entra ID P1 or P2 still need the appropriate license.
Co-management is the clearest example. Enrolling existing Configuration Manager devices at scale without user interaction uses Entra auto-enrollment, and Microsoft lists Microsoft Entra ID P1 or P2 assigned to each user as a requirement. So the Intune license cost is rarely the whole endpoint management bill.
The device-only subscription, which almost nobody mentions
This is the part of Intune licensing that saves real money and rarely appears in a comparison. Intune sells a device-only subscription for devices that are not tied to a person: kiosks, dedicated devices, phone-room devices, IoT and other single-use hardware. You license the device instead of the user.
Microsoft lists exactly which enrollment methods qualify: Windows Autopilot Self-Deploying mode, Apple Device Enrollment Program without user affinity, Apple School Manager without user affinity, Apple Configurator without user affinity, Android Enterprise dedicated, and enrollment through a device enrollment manager account. A user signing in without an Intune license does not stop device-targeted policies from applying.
The cost of that saving is published too, and it is not small:
| Not supported on a device-only license | Why it matters |
|---|---|
| Conditional Access | The device cannot be gated on compliance before it reaches corporate data |
| Intune app protection policies | No containment of corporate data inside apps |
| User-based features, such as email and calendaring | Anything that belongs to a person rather than the hardware |
So it fits a warehouse of scanners and a wall of tablets, and it does not fit a shared laptop somebody reads mail on.
The licensing rule to read twice
Microsoft’s wording is broad and worth quoting exactly: An Intune license is required for any user or device that benefits directly or indirectly from the Microsoft Intune service, including access through a Microsoft API.
Directly or indirectly, and through an API. If a system you built reads Intune data on behalf of people who never open the console, that sentence is about them. It is the kind of clause that costs nothing until an audit, and it is published rather than buried.
The documentation adds one boundary worth knowing: Intune is included only with the licenses listed on its own plans and pricing page. A bundle that is not on that list does not carry it, whatever a reseller says.
Two administrative details that change the count
Administrators may not need a license. Unlicensed admin access lets administrators sign in and manage Intune without an assigned license. It is on by default for tenants created after July 2021. Older tenants can enable it manually, and Microsoft states plainly that the setting cannot be undone once it is turned on.
Nested groups are the exception. Members of nested security groups are not covered by unlicensed admin access, so administrators reached through a nested group still need a license even when the setting is on.
There is also a ceiling. Intune supports up to 1,000 unlicensed admins per security group, and Microsoft says to split a larger role assignment across several groups. Access changes can take up to 48 hours to take effect.
One right inside the license is easy to miss. Microsoft states that most licenses which include Intune also grant the rights to use Microsoft Configuration Manager, as long as the subscription stays active. For an estate still running Configuration Manager, that is worth checking against what you currently pay for it.
CompareHow it sits against the alternatives
Against the rest of the field, Intune is the only product where the honest answer to "what does it cost" is often "nothing extra".
| Product | Unit | Published price |
|---|---|---|
| Microsoft Intune | Per user | Inside E3 at $39.00 or E5 at $60.00. Plan 1 alone, not published |
| JumpCloud | Per user | $9 per user per month, billed annually |
| Jamf | Per device | $12.50 per Mac, $5.75 per mobile device |
| Scalefusion | Per device | $2 to $6 per device per month |
| Hexnode | Per device | $2.20 to $4.70 per device per month |
| Kandji | Not disclosed | Request a quote, on every tier |
That table is misleading in one direction and it is worth saying so. Comparing $39.00 for E3 against $9 for JumpCloud is comparing an office suite, an identity platform and a security stack against a device manager.
The comparison only becomes fair at the margin: if you already hold E3, Intune costs nothing more and every other row on that table is a new invoice.
Where the calculation turns is an organization that is not on Microsoft 365 and does not want to be. Buying E3 to get Intune is buying a great deal of software to solve one problem, and at that point the per device products in the MDM ranking are the right comparison rather than this one.
The other side of that trade is the capability nothing else here has natively. Intune device compliance feeds Conditional Access directly, so a device out of policy loses access rather than generating a report about it. That is worth eight points on the rubric and it is the reason Intune tops the MDM ranking despite the licensing maze.
ScoreHow it scores on the rubric
ChangelogWhat changed in this update
- First published, from figures read at the Microsoft Intune pricing page and licensing structure read at Microsoft Learn on September 10, 2026, including the device-only subscription, its Conditional Access limitation, and the unlicensed administrator rules.
- Re-read the Microsoft Intune pricing page, the licensing article and the service overview on Microsoft Learn. No figure had moved. Added what the service being priced actually is, what each add-on does in Microsoft’s own words, the Microsoft Entra ID licenses behind an Intune bill, the 1,000 unlicensed admin ceiling and the Configuration Manager usage right.
FAQFrequently asked questions
How much does Microsoft Intune cost?
It depends on how you buy it, and the most common answer is that it is already in a bundle you hold.
Microsoft 365 E3 is $39.00 per user per month paid yearly and E5 is $60.00, and advanced Intune capabilities are included in both. Intune Plan 2 is $4.00 as an add-on. Intune Plan 1, the base service, has no published figure on the pricing page.
What is Microsoft Intune, in one sentence?
A cloud-based endpoint management service that secures and manages an organization’s devices and apps. Microsoft lists Android, iOS and iPadOS, Linux, macOS, tvOS, visionOS and Windows as supported platforms, and says the service runs entirely in the cloud with no on-premises infrastructure required.
Why is Intune Plan 1 pricing not published?
Microsoft does not say. What its documentation does say is that most organizations get Intune inside a Microsoft 365 bundle rather than buying the plans directly, which is consistent with a pricing page that prices the bundles and the add-ons and leaves the base plan out. If you need a Plan 1 figure, it comes from a quote.
How is the Intune license cost worked out?
Per user or per device, per month, paid yearly, plus whichever add-ons you buy on top. What the page leaves out is Microsoft Entra ID: Intune relies on it for authentication, groups and Conditional Access, and features that depend on Entra ID P1 or P2 still need their own license.
Is Intune included in Microsoft 365 E3?
Yes. Microsoft states that select advanced Intune capabilities are now included in Microsoft 365 E3 and E5, dated July 2026 in its blog and CY26 Q3 on the pricing page. Its own advice on the pricing page is that most organizations should first check their existing E3 or E5 license before buying anything.
What is the difference between Intune Plan 1, Plan 2 and the Intune Suite?
Plan 1 is the base service. Plan 2 is additive to Plan 1 and covers specialty devices, shared devices and complex edge scenarios at $4.00 per user per month. The Intune Suite is also additive to Plan 1, unifies the advanced capabilities, and includes Plan 2. Additive is the word that matters: these are not tiers, they stack.
What do the Intune add-ons actually do?
In Microsoft’s words: Advanced Analytics is endpoint analytics and anomaly detection, Remote Help is secure helpdesk support, Endpoint Privilege Management handles privilege elevation, Enterprise Application Management is a hosted app catalog for discovery and updates, and Cloud PKI replaces an on-premises certificate authority.
Can I license Intune per device instead of per user?
Yes, for devices not tied to a person. Intune offers a device-only subscription for kiosks, dedicated devices, phone-room devices and IoT, covering enrollment through Autopilot Self-Deploying, Apple DEP, School Manager or Configurator without user affinity, Android Enterprise dedicated, and a device enrollment manager account.
What does a device-only Intune license not cover?
Three things Microsoft lists: Conditional Access, Intune app protection policies, and user-based features such as email and calendaring. The first is the significant one, because losing Conditional Access means the device cannot be gated on its compliance state before it reaches corporate data. It fits kiosks and scanners, not shared laptops people read mail on.
Do administrators need an Intune license?
Often not. Unlicensed admin access lets administrators sign in and manage Intune without a license, and it is on by default for tenants created after July 2021. Older tenants can turn it on manually, and Microsoft states that the setting cannot be undone afterwards. Administrators reached through a nested security group are the exception and still need a license.
Who exactly needs an Intune license?
Microsoft’s wording is deliberately broad: a license is required for any user or device that benefits directly or indirectly from the service, including access through a Microsoft API. If something you built reads Intune data on behalf of people who never open the console, that sentence covers them.
Does an Intune license include Configuration Manager?
Microsoft states that most licenses which include Intune also grant the rights to use Microsoft Configuration Manager, as long as the subscription stays active. Co-management at scale is a separate matter: that needs Microsoft Entra ID P1 or P2 assigned to each user.
Is Intune cheaper than Jamf or JumpCloud?
At the margin, usually yes, and only if you already hold E3 or E5, in which case it costs nothing more while JumpCloud at $9 per user and Jamf at $12.50 per Mac are new invoices.
If you are not on Microsoft 365, buying E3 to get Intune is buying a great deal of software to solve one problem, and the per device products are the better comparison.
Does Intune have a free trial?
Yes, and the trial includes more than Intune. Signing up creates an Intune license and also a trial Enterprise Mobility plus Security subscription, which carries Microsoft Entra ID P1 or P2 alongside Intune, so the trial exercises capabilities that are separately licensed afterwards.
Are these figures current?
They were read at Microsoft’s own Intune pricing page on September 10, 2026, with the licensing structure read at Microsoft Learn the same day, and read again on September 23, 2026 with no figure moved. Every published figure carries Microsoft’s own qualifier that prices may vary based on your agreement, so confirm anything you are about to budget against.
Keep comparingRelated rankings
- Best Patch Management Software, and What Each One Reaches Seven tools, one 40 point rubric, every subscore published. Check the Windows Autopatch you may already own, t...
- JumpCloud Alternatives: Directory, SSO or Devices? JumpCloud is three products sold as one, identity, access and device management, and every alternative ranked...
- Ivanti Alternatives, by Which Ivanti You Are Leaving Ivanti is LANDESK, HEAT, MobileIron and Pulse Secure under one name, sold across endpoint management, IT servi...
- Atera Alternatives, and Why There Is No Half to Keep Atera is one product on one database, which is why people choose it and why leaving is all or nothing. It is a...
- ConnectWise Competitors, and the Half You Can Leave ConnectWise tops its ranking at 8.5, so nobody leaves it because it cannot do the job. They leave over price o...
- NinjaOne Competitors, and Why One of Them Is Not Leaving NinjaOne is the deepest endpoint management in its ranking, and its own site now publishes a PSA as well. So m...