Windows Commercial Licensing overview
This document provides an overview of the products and use rights available through Microsoft Commercial Licensing, information about the products that are eligible for upgrades, and the key choices you have for using Windows in your organization.
Note
The content of this article doesn't replace or override other licensing documentation, such as the Windows 11 End User License Agreement or Commercial Licensing Product Terms.
Windows 11 editions
The following table lists the editions of Windows 11 available through each Microsoft distribution channel:
| Full Packaged Product (Retail) | Preinstalled on device (OEM) | Commercial Licensing |
|---|---|---|
| Windows 11 Home Windows 11 Pro |
Windows 11 Home Windows 11 Pro |
Windows 11 Pro Windows 11 Enterprise Windows 11 Enterprise LTSC |
Windows desktop offerings available through Commercial Licensing
The following offerings are available for purchase through Microsoft Commercial Licensing:
| Product | Description | Availability |
|---|---|---|
| Windows 11 Pro Upgrade | Windows 11 Pro is designed for small and medium businesses. Windows 11 Pro enables organizations to manage devices and apps, protect their data, facilitate remote and mobile scenarios, while taking advantage of the cloud technologies that support their business. Windows 11 Pro devices are a good choice for organizations that support choose your own device (CYOD) programs and prosumer customers. | The Windows 11 Pro Upgrade in Commercial Licensing upgrades a device from a previous version of Windows Pro. |
| Windows 11 Enterprise E3 | Windows 11 Enterprise E3 is intended for large and medium-sized organizations. It includes Windows Enterprise edition with cloud-powered capabilities and subscription use rights. Examples include advanced identity protection, the broadest range of options for operating system deployment, update control, and device management. | Windows 11 Enterprise E3 is available per-user in Commercial Licensing programs. It requires Windows Pro as qualifying operating systems. |
| Windows 11 Enterprise E5 | Windows 11 Enterprise E5 is for organizations that want to take advantage of everything in Windows 11 Enterprise E3 with the addition of Microsoft Defender for Endpoint Plan 2, a service that helps enterprises detect, investigate, and respond to advanced cybersecurity attacks on their endpoints and networks. | Windows 11 Enterprise E5 is available per-user in Commercial Licensing programs. It requires Windows Pro as qualifying operating systems. |
| Windows 10 Enterprise LTSC | Windows 10 Enterprise LTSC is designed for devices that have strict change-management policies with only security and critical bug fixes. By using a Long-Term Servicing Channel edition, you can apply monthly Windows 10 security updates for specialized devices while holding back new-feature updates for an extended period of time, up to five years. | Windows Enterprise LTSC is available in the per-user and per-device model, depending on the Volume Licensing program through which it's acquired. |
| Windows Virtual Desktop Access (VDA) Subscription License | The Windows VDA subscription license provides the right to access virtual Windows desktop environments from devices that aren't covered by a Commercial Licensing offer that includes VDA rights, such as thin clients. | Windows VDA is available on a per-device and per-user basis. |
Windows 11 Pro Upgrade license
Windows 11 Pro is designed for small and medium businesses. Windows 11 Pro enables you to manage your devices and apps, protect your business data, facilitate remote and mobile scenarios, and take advantage of the cloud technologies for your organization.
The Windows 11 Pro Upgrade license is recommended if you want to:
- Upgrade a Windows 10 Pro device to Windows 11 Pro
- Upgrade Windows 7/8/8.1 Pro devices to Windows 10 Pro
Windows 11 Enterprise
There are two core Windows 11 Enterprise offers: Windows 11 Enterprise E3 and Windows 11 Enterprise E5. These offers can be purchased on a per-user basis, and are only available through Commercial Licensing, including the Cloud Solution Provider program.
Windows 11 Enterprise E3
Windows 11 Enterprise E3 builds on Windows 11 Pro by adding more advanced features designed to address the needs of large and mid-size organizations. Examples include advanced protection against modern security threats, the broadest range of options for operating system deployment and update, and comprehensive device and app management.
Note
Windows Enterprise E3 is a per user subscription, intended for organizations. It includes Windows Enterprise edition with cloud-powered capabilities and subscription use rights. Windows Enterprise E3 is usually licensed through Volume Licensing programs and is an upgrade from Windows Pro.
Windows 11 Enterprise features
The following table describes the unique Windows Enterprise edition features:
| OS-based feature | Description |
|---|---|
| Credential Guard | Protects against user credential harvesting and pass-the-hash attacks or pass the token attacks. |
| Managed Microsoft Defender Application Guard (MDAG) for Microsoft Edge | Isolates enterprise-defined untrusted sites with virtualization-based security from Windows, protecting your organization while users browse the Internet. |
| Modern BitLocker Management | Allows you to eliminate on-premises tools to monitor and support BitLocker recovery scenarios. |
| Personal Data Encryption | Encrypts individual's content using Windows Hello for Business to link the encryption keys to user credentials. |
| Direct Access | Connect remote users to the organization network without the need for traditional VPN connections. |
| Always-On VPN device tunnel | Advanced security capabilities to restrict the type of traffic and which applications can use the VPN connection. |
| Windows Experience customization | Settings to lock down the user experience of corporate desktops and Shell Launcher with Unified Write Filter for frontline workers devices or public kiosks. |
Windows 11 Enterprise cloud-based capabilities
The following table describes the unique Windows Enterprise cloud-based features:
| Cloud-based feature | Description |
|---|---|
| Windows subscription activation | Enables you to step-up from Windows Pro edition to Enterprise edition. You can eliminate license key management and the deployment of Enterprise edition images. |
| Windows Autopatch | Cloud service that puts Microsoft in control of automating updates to Windows, Microsoft 365 Apps for enterprise, Microsoft Edge, and Microsoft Teams. |
| Universal Print | Removes the need for on-premises print servers and enables any endpoint to print to cloud registered printers. |
| Microsoft Connected Cache | A software solution that caches app and OS updates on the local network to save Internet bandwidth in locations with limited connectivity. |
| Endpoint analytics proactive remediation | Helps you fix common support issues before end-users notice them. |
| Organizational messages | Keeps employees informed with organizational messages directly inserted in Windows UI surfaces. |
Windows 11 Enterprise licensing use rights
The following table describes the Windows Enterprise licensing use rights:
| Licensing use rights | Description |
|---|---|
| Five Windows instances per licensed user | Allows your employees to simultaneously use a Windows laptop, a cloud PC and a specialized device with Windows LTSC, and more. |
| 36 months (3 years) support on annual feature releases | Get extra time to deploy feature releases. |
| Azure Virtual Desktop, Windows 365 Enterprise and Virtual Desktop Access | Empower flexible work styles and smarter work with the included virtualization access rights. Includes FSLogix for a consistent experience of |
| Windows user profiles in virtual desktop environments. | |
| Windows release health in the Microsoft 365 admin center | Gives you essential information about monthly quality and feature updates in the Microsoft 365 admin center. |
| Windows feature update device readiness report | Provides per-device information about compatibility risks that are associated with an upgrade or update to a chosen version of Windows. |
| Windows feature update compatibility risks reports | Provides a summary view of the top compatibility risks, so you understand which compatibility risks impact the greatest number of devices in your organization. |
| Windows LTSC Enterprise | Intended for highly specialized devices that require limited changes due to regulations and certification |
| Microsoft Desktop Optimization Pack (MDOP) | Help improve compatibility and management, reduce support costs, improve asset management, and improve policy control. |
Learn more about Windows 11 Enterprise E3.
Windows 11 Enterprise E5
Windows 11 Enterprise E5 is for organizations that want to take advantage of everything in Windows 11 Enterprise E3 with the addition of Microsoft Defender for Endpoint Plan 2, a cloud service that helps enterprises detect, investigate, and respond to advanced cybersecurity attacks on their endpoints and networks.
Building on the existing security defenses in Windows 11, Microsoft Defender for Device provides a post-breach layer of protection to the Windows 11 security stack. With a combination of client technology built into Windows 11 and a robust cloud service, it can help detect threats that have made it past other defenses, provide enterprises with information to investigate the breach across endpoints, and offer response recommendations.
Note
Windows 11 Enterprise E5 is available per user in Commercial Licensing programs.
Windows Enterprise E3 in Microsoft 365 F3
Windows Enterprise E3 subscription license in Microsoft 365 F3 has all the OS features, and most of the cloud services and use rights, included with regular Windows Enterprise E3. Windows Enterprise E3 in Microsoft 365 F3 does not include some use rights previously included in Software Assurance benefits that come with the regular E3 user subscription license. F3 does not come with:
- Microsoft Desktop Optimization Pack (MDOP)
- Windows LTSC Enterprise
- Windows Autopatch
Use a Windows Pro device with the Windows Enterprise user subscription license
In most cases, the Windows Pro edition comes pre-installed on a business-class device. Microsoft recommends upgrading your Windows Pro devices to Enterprise edition when you have acquired a user subscription license for Windows. However, there are cases that require to keep devices on the Pro edition and not upgrade them to Enterprise edition. With Windows 11 Enterprise E3, you can take advantage of features, services and use rights not licensed to the Windows Pro license bound to the device. It includes Windows Enterprise edition with cloud-powered capabilities and subscription use rights, and these capabilities are not always technically enforced. Some scenarios that may require to not upgrade to Windows Enterprise edition:
- Devices not properly provisioned that don't automatically upgrade to Windows Enterprise edition
- Devices may have been acquired for a business process that was not under control of a central IT department or outside of the IT department's knowledge
- Devices may be used temporarily for a project by vendors and added to the IT infrastructure, but not upgraded to Enterprise edition
- A developer that is developing applications that must be tested and certified on Pro, as that is how it will be delivered to customers
- A Windows Pro device that was pre-configured for a specific purpose and is certified on Pro only
In these cases, you want the PC to be configured, secured, monitored, and updated with the enterprise management and security tools that come with the Windows Enterprise user subscription. Your Windows Enterprise E3 subscription doesn't block these scenarios.
The following table lists the Windows 11 Enterprise features and their Windows edition requirements:
| OS-based feature | Windows Pro | Windows Enterprise |
|---|---|---|
| Credential Guard | ❌ | Yes |
| Microsoft Defender Application Guard (MDAG) for Microsoft Edge | Yes | Yes |
| Modern BitLocker Management | Yes | Yes |
| Personal Data Encryption | ❌ | Yes |
| Direct Access | Yes | Yes |
| Always On VPN | Yes | Yes |
| Windows Experience customization | ❌ | Yes |
The following table lists the Windows 11 Enterprise cloud-based features and their Windows edition requirements:
| Cloud-based feature | Windows Pro | Windows Enterprise |
|---|---|---|
| Windows subscription activation | Yes | Yes |
| Windows Autopatch | Yes | Yes |
| Universal Print | Yes | Yes |
| Microsoft Connected Cache | Yes | Yes |
| Endpoint analytics proactive remediation | Yes | Yes |
| Organizational messages | ❌ | Yes |
The following table lists the Windows 11 Enterprise E3 licensing use rights and their Windows edition requirements:
| Licensing use rights | Windows Pro | Windows Enterprise |
|---|---|---|
| Five Windows instances per licensed user | n/a | n/a |
| 36 months (3 years) support on annual feature releases | ❌ | Yes |
| Azure Virtual Desktop, Windows 365 Enterprise and Virtual Desktop Access | n/a | n/a |
| Windows release health in the Microsoft 365 admin center | n/a | n/a |
| Windows feature update device readiness report | Yes | Yes |
| Windows feature update compatibility risks reports | Yes | Yes |
| Windows LTSC Enterprise | n/a | n/a |
| Microsoft Desktop Optimization Pack (MDOP) | Yes | Yes |
Next steps
To learn more about Windows 11 Enterprise E3 and E5 licensing, download the Windows 11 licensing guide. The guide provides additional information to complement the information in this article, including:
- Description of qualifying operating systems
- Availability of Windows desktop operating system products in licensing programs
- Deciding between per-device and per-user licensing
- Windows 11 downgrade rights
- Volume license activation methods
- How to acquire licenses through Commercial Licensing