Microsoft 365 Business Part 2 – Azure Active Directory

In the first post of this series I covered the Windows 10 Pro upgrades included in Microsoft 365 Business, today it's time to discuss the Azure Active Directory components that work alongside Intune to enable Windows 10 Business. I'll start by posting the components included with the Microsoft 365 Business SKU again.

Third from the bottom you can see Azure Active Directory, and this version is a subset of Azure Active Premium P1, focusing on the required components that allow the Windows 10 management scenarios that are required. These include MDM Auto enrol, more than ten SaaS apps for single sign on in myapps, as well as self service capabilities and enterprise state roaming. We can still open the Azure Active Directory admin center from the Microsoft 365 admin center, and it looks like this.

Looking at the dashboard you can see that this doesn't offer all of the capabilities of Azure Active Directory Premium P1, but if you do need the extra capabilities such as the additional security reporting, and clicking through the various options will soon give an idea of what is and isn't included. If you eventually need to add these capabilities, you can easily add the required licenses alongside your Microsoft 365 Business licenses, and below I've included some screenshots of what happens in a tenant that has taken more of a mix and match approach.

Starting with a simple view, you can see that I have five different SKUs in this tenant, a mix of enterprise and SMB focused offerings.

In this screenshot I want to highlight the specific naming of the Azure Active Directory SKUs that are include with EMS E5- Premium 1 and Premium 2, as opposed to the Azure Active Directory that is referenced in the first image in this post.

Finally, for comparison, you can see here that because this tenant has AAD Premium, I can see the additional reports, as well as not being prompted to sign up for a trial subscription to AAD Premium.