Update (March 2026): This article was originally published in 2021 and has been refreshed to reflect Microsoft name changes (for example, Windows Virtual Desktop is now Azure Virtual Desktop, and Azure AD is now Microsoft Entra ID). Some features discussed are available across multiple Microsoft 365 plans, so always check current plan inclusions.
Executive Summary
Our Inside 365 Business Premium series offers a deep dive into the features included with Microsoft 365 Business Premium, especially the ones that are easy to overlook.
In this final edition, we cover several “small-but-mighty” capabilities that are included with Business Premium, and in some cases are also available as add-ons depending on the plan you are using.
Our coverage includes Azure Virtual Desktop, Microsoft Purview Data Loss Prevention (DLP), shared computer activation, sensitivity labels, administrative units, and email archiving.
Introduction
Welcome to the final instalment of our Inside 365 Business Premium series on the Get Support blog.
So far, we’ve looked in-depth at some very big features which Business Premium offers to subscribers – but it’s got plenty of small-but-mighty features, too.
In this final edition, we’ll be taking some time to look at some of the lesser-known features and tools that are included with Microsoft 365 Business Premium. In a few cases, similar capability can also be added to other plans, so it is always worth checking current plan inclusions when you are comparing licences.
Let’s get started.
Azure Virtual Desktop (formerly Windows Virtual Desktop)
One thing that makes Business Premium feel genuinely “premium” is how it supports secure, scalable ways of working when your team is not always sat in the same place. A good example is Azure Virtual Desktop (formerly Windows Virtual Desktop).
Azure Virtual Desktop lets you stream a full Windows 11 or Windows 10 desktop (or just specific apps) from Microsoft Azure to your users, wherever they are. For many SMEs, the big win is that Microsoft 365 Business Premium includes the Windows virtual desktop access rights for eligible users, so you are not having to buy separate Windows virtual desktop licensing on top. You still pay for the Azure resources that run it (compute, storage, networking), because those costs depend on how many users you have and how powerful the virtual machines need to be.
In plain English, it can be a great way to give staff a consistent, secure “work PC” experience from almost any device, which is useful for hybrid working, contractors, temporary staff, or roles that handle sensitive data. And because Business Premium already includes the Microsoft 365 apps, your team can work in Word, Excel, Outlook and Teams inside that virtual desktop with the same familiar tools.
Pretty cool, right?
Data Loss Prevention (DLP)
Microsoft Purview Data Loss Prevention (DLP) is one of those features that sounds technical, but it solves a very human problem: people make mistakes when they are busy.
DLP lets you set rules that detect sensitive information in emails and files, then step in before it leaves the business. For example, you might want to stop credit card numbers, ID documents, payroll details, or confidential client data being emailed externally or shared with the wrong people. When DLP spots something risky, it can show the user a clear policy tip, warn them they are about to share something sensitive, or block the action entirely depending on how strict you need to be.
The key benefit here is not “more tools”. It is consistency. DLP helps you apply the same data protection rules across the business, so it is less reliant on everyone remembering what they should and should not send. And when it is deployed properly by an IT partner, it supports the day-to-day reality of modern work without creating endless friction.
Exchange Online Archiving (email archiving)
Most businesses reach a point where email becomes “too important to delete”, but also too messy to manage. Archiving helps you keep the records you need without everyone hoarding mail in their primary mailbox forever.
In practical terms, archiving gives your users an archive mailbox and helps you retain and search older email without slowing down day-to-day working. It is also useful when someone leaves, because you can preserve mailbox data in a controlled way rather than relying on ad-hoc exports or leaving accounts active longer than they should be.
The key update for 2026 is this: Exchange archiving is not exclusive to Business Premium, but it is not included in every plan by default either. Microsoft 365 Business Premium includes Exchange Archiving, and Business Basic and Business Standard can add it if archiving is a requirement.
Where Business Premium earns its keep is in what sits around your email. If you are retaining more email (and therefore more sensitive information), you also need stronger, more consistent security and management across identity, devices, and access. That wider “wraparound” is why we often recommend Business Premium as the sensible default for UK SMEs.
If you are thinking about retention, legal requirements, or how to handle leavers properly, we can help you put a joined-up approach in place, so you keep what you need without increasing risk.
Shared computer activation for Microsoft 365 Apps
Microsoft 365 Apps is a great way of giving a distributed workforce access to the core Office apps, but licensing can get confusing when staff are not tied to a single device.
Normally, a user can install and activate Microsoft 365 Apps on up to five devices. That is fine when everyone has their own laptop. But it is not how many real workplaces operate. Think factory floors, front desks, clinical settings, call centres, shared shift PCs, or training rooms where multiple people log into the same machine across a day.
Shared computer activation solves that problem. It allows Microsoft 365 Apps to be used on shared machines without those devices counting towards each user’s five device activation limit. In other words, staff can sign in, do their job, and sign out again, without creating licensing and activation headaches for the business.
It is one of those behind-the-scenes settings that makes Microsoft 365 work properly in the real world, and it is exactly the sort of thing we design and deploy for clients as part of a joined-up Business Premium rollout.
Sensitivity labels (Microsoft Purview Information Protection)
In a previous edition of the Inside 365 Business Premium series, we covered information protection and sensitivity labels. Since this series was first published, Microsoft has moved the terminology on: you will now see sensitivity labels referenced under Microsoft Purview Information Protection.
Sensitivity labels are a simple idea with a big impact. They let you classify information in a consistent way (for example: Public, Internal, Confidential, Highly Confidential) and, if you choose, apply protection that travels with the file or email. That can include things like encryption, access restrictions, or visible markings such as headers and watermarks.
The important update here is that sensitivity labels are now built into Microsoft 365 apps. The older Azure Information Protection unified labeling add-in was retired in April 2024, so any modern rollout should be based on the built-in experience rather than legacy add-ins.
If sensitivity labels would benefit your business, the key is to design them around how you actually work, then roll them out in a way that protects data without constantly annoying users. That is where we help: sensible label design, clear rules, and a rollout plan that people will actually follow.
Read more: [Link] Inside 365 Business Premium: Information Protection and sensitivity labels
Administrative units in Microsoft Entra ID (formerly Azure Active Directory)
As organisations grow, administration can become messy. You want people to be able to manage users and support day-to-day requests, but you do not want everyone to have broad admin rights across the whole business.
Administrative units help solve this by letting you delegate admin responsibilities to a specific slice of your organisation, such as a department, location, or business unit. For example, you could allow a local admin to manage users for the Oxford office, without giving them access to users in other offices or the ability to change wider tenant settings.
This creates a more controlled, least-privilege approach to administration. It reduces the risk of accidental changes, keeps responsibilities clearer, and scales much better than simply adding more global admins as you grow.
Business Premium includes Microsoft Entra ID Plan 1, which is where many of the most useful identity and access controls live. When we set tenants up properly, we build an admin model that fits the business, not just the technology.
Discover the complete picture of 365 Business Premium with Get Support
We hope this final edition of Inside 365 Business Premium has helped highlight the parts of the plan that often get missed, but make a real difference in day-to-day security and manageability.
Get Support is a Microsoft Cloud Solution Provider (CSP). That means we can help you choose the right licensing, deploy Business Premium properly, and then manage it as an ongoing service, so it stays secure as your business changes.
If you would like to make sure you are getting the value from Business Premium (and not paying for features you are not using), get in touch for a quick licensing and security review.
If you haven’t done so already, be sure to check out the rest of our Inside 365 Business Premium series at the links below:
- Inside 365 Business Premium: Microsoft Intune
- Inside 365 Business Premium: Microsoft Entra ID Plan 1 (formerly Azure AD Premium P1)
- Inside 365 Business Premium: Microsoft Defender for Office 365 Plan 1
- Inside 365 Business Premium: Information Protection and sensitivity labels (Microsoft Purview)
If you’re keen to get your business started with a new Business Premium subscription for Microsoft 365, we’re here to help. Call the team now on 01865 59 4000 or fill in the form below to get the ball rolling.