Alongside the July 1, 2026 pricing update, Microsoft is changing what its commercial suites contain. The packaging rollout runs through June 2026 and completes by August 1. Coverage of this change has focused almost entirely on the price movement, which is understandable but leaves the more consequential half of the story unexamined: several components that organizations currently buy as line-item add-ons are becoming part of the base suite.
For any organization running a Microsoft 365 estate with a layer of security and management add-ons bolted on top, this reshapes the licensing arithmetic. The correct question is not "how much is the increase" but "how much of my current add-on spend does this absorb."
What lands in each suite
Microsoft 365 E5 receives the largest addition. It gains Microsoft Security Copilot, Microsoft Cloud PKI, Intune Endpoint Privilege Management, Intune Enterprise Application Management, and everything added to E3. For organizations that have been running a Security Copilot evaluation on separate provisioned capacity, or that maintain a certificate authority estate they would rather retire, this is a material change to the business case.
Microsoft 365 E3 gains Microsoft Defender for Office 365 Plan 1, Intune Plan 2, Intune Remote Help, and Intune Advanced Analytics. Defender for Office 365 P1 and Intune Plan 2 in particular are among the most commonly purchased add-ons in the mid-market, and both were priced individually at levels that comfortably exceed the three-dollar suite increase.
Office 365 E3 also gains Defender for Office 365 Plan 1. Office 365 E1 and E5 gain URL time-of-click protection and the Copilot Chat improvements. Every commercial suite in the update gains Copilot Chat enhancements — inbox and calendar awareness, and Word, Excel and PowerPoint agents — along with Copilot Chat Analytics, which gives administrators tenant-level visibility into how Copilot Chat is actually being used.
Business Basic and Business Standard gain fifty gigabytes of additional mailbox storage plus URL time-of-click protection. Business Premium gains the fifty gigabytes and the Copilot Chat capabilities, and holds its price at 22.00 USD. Frontline F1 and F3 gain the Copilot Chat enhancements and analytics.
On the standalone side, Windows E3 gains Quick Machine Recovery for commercial customers and post-quantum security APIs. Enterprise Mobility + Security E3 and E5 both gain Intune Remote Help, Intune Advanced Analytics, and Intune Plan 2.
The audit this triggers
Three questions are worth answering before your next renewal. First, which of these components are currently on your invoice as separate subscriptions? Every one of those lines is a candidate for removal once the packaging change reaches your tenant. Second, which of them are you not using but now own? Intune Advanced Analytics and Copilot Chat Analytics both produce operational value immediately and require no procurement. Third, does the new bundled configuration change the E3-versus-E5 decision you made previously? For estates that had assembled an E3-plus-add-ons position approaching E5 economics, the answer is frequently yes.
There is a governance dimension too. Microsoft Security Copilot arriving inside E5 means it will become available to security teams who have not been trained on it, in tenants where nobody has defined what data it may reason over. Cloud PKI arriving in E5 means certificate issuance becomes possible in an environment where certificate policy may not exist. New capability inside an existing licence is still new capability, and it needs the same controls as anything procured deliberately.
Timing
Packaging changes reach tenants progressively between June and August 1, 2026, with Microsoft committing to a minimum of thirty days notice through the Message Center. Administrators should be watching Message Center for the specific rollout notification for their tenant rather than assuming a uniform date, because the capability appearing is what allows the corresponding add-on subscription to be cancelled at its next term boundary.
How Lorexus engages
We map your current subscription lines against the new suite contents, identify the add-ons that become redundant and the term dates on which they can be released, and produce a net cost position that accounts for both the increase and the absorption. We also configure the newly arriving components — Intune Plan 2 policy, Cloud PKI, Security Copilot data boundaries — so that capability you now own is capability you actually run.