Intune in Microsoft 365 E3/E5: New Capabilities
Summary
Microsoft is adding several advanced Intune capabilities to Microsoft 365 E3 and E5 starting July 1, with eligible tenants expected to receive them by August 1. The update expands built-in endpoint management, analytics, remote support, and privilege controls, helping IT teams reduce add-ons and manage more from a single platform.
Introduction
Microsoft is expanding the value of Microsoft 365 E3 and E5 by including advanced Microsoft Intune capabilities that previously required separate planning or add-ons. For IT administrators, this matters because it can simplify licensing, centralize endpoint management, and unlock more security and support features without adding another toolset.
The packaging changes take effect on July 1, 2026, and Microsoft says eligible existing customers should see the new capabilities in their tenants by August 1, 2026.
What's new in Microsoft 365 E3 and E5
Included with Microsoft 365 E3
- Intune Remote Help
- Intune Advanced Analytics
- Intune Plan 2
Included with Microsoft 365 E5
E5 includes everything in E3 above, plus:
- Intune Endpoint Privilege Management (EPM)
- Microsoft Cloud PKI
- Intune Enterprise App Management
- Microsoft Security Copilot
Why these additions matter
Microsoft is positioning Intune as a more complete, centralized management platform. Instead of relying on multiple vendors for remote support, endpoint insights, privilege management, and app management, organizations can handle more from the Microsoft stack they already license.
Key benefits include:
- Better endpoint visibility with Advanced Analytics, including device query, anomaly detection, and battery health reporting
- Simplified support workflows through Remote Help with role-based access and unattended support scenarios
- Stronger least-privilege security using Endpoint Privilege Management for just-in-time elevation instead of permanent local admin rights
- Potential licensing consolidation for organizations already standardized on Microsoft 365
Impact on IT admins
For Intune administrators, the biggest change is practical: more capabilities may now be available by default in existing E3 or E5 environments. That can affect roadmap planning, tool rationalization, and how teams approach endpoint security and support.
Admins should also evaluate how these features fit with existing investments, especially if they already use third-party remote assistance, endpoint analytics, or privilege elevation tools. The Microsoft blog highlights MVP guidance comparing the included capabilities with alternative approaches and explaining where each feature works best.
Recommended next steps
- Review your current Microsoft 365 licensing to confirm eligibility
- Check tenant readiness and rollout timing ahead of the August 1 target
- Assess overlap with third-party tools for analytics, remote support, and privilege management
- Pilot key features such as Remote Help, Advanced Analytics, or EPM before broad deployment
- Use Microsoft Learn and MVP resources to understand implementation details and best practices
This update is especially important for organizations looking to get more value from Microsoft 365 while reducing complexity in endpoint management.
Need help with Intune?
Our experts can help you implement and optimize your Microsoft solutions.
Talk to an ExpertStay updated on Microsoft technologies