Fix it now
Business Standard is Business Basic with the installed applications added, and that single addition is why it is the default small-business licence. Each user gets desktop Word, Excel, PowerPoint, Outlook and Access on Windows across several machines, alongside the mailbox, Teams and SharePoint. What it does not include is the security and device management stack.
- Buy it for most office staff: people who build documents rather than only read them, work offline sometimes, and use Excel for more than a list.
- Buy it if anyone needs Access on Windows, VBA macros, or the COM add-ins that accounting and CRM products install.
- Buy it if people work across a desktop, a laptop and a phone, because the licence allows five of each per user with sign-in activation.
- Skip it for mail-first staff who never open a document. Business Basic covers them for less and the saving across a warehouse is not trivial.
- Skip it if you need managed devices, conditional access or endpoint detection. That is Business Premium, and no amount of configuration adds it to Standard.
- Skip it for session hosts and non-persistent virtual desktops, because shared computer activation is not included with this plan.
Mailboxes are 50 GB with a 50 GB archive, the tenant is capped at 300 seats across the whole Business family, and Microsoft sells versions of the plan with and without Teams.
If that fits the majority of your staff you can stop here. The rest names the security gap precisely and explains what a lapsed subscription actually does to your data.
Why it happens
The licence follows the user rather than the machine. Each person may install the applications on up to five PCs or Macs, five tablets and five phones, and activation is by sign-in, so a replaced laptop needs no key and no support call. Microsoft’s own description of the mechanism is that the licence is carried in the user’s profile and the machine checks in daily; as long as it can reach the internet once every 30 days the applications stay fully functional, and beyond that they drop into reduced functionality mode until a connection returns.
These are the same binaries the enterprise plans install, kept current on an update channel rather than frozen at a version. Access is included on Windows, which is worth knowing because it is the cheapest legitimate route to Access for a small business that also wants mailboxes. Files stay fully compatible with perpetual Office, so a mixed estate causes no format problems, and Publisher is not part of the equation any more: Microsoft has set its end of life for October 2026.
The collaboration half is the same as Business Basic – Exchange Online mailboxes at 50 GB, SharePoint, OneDrive, Teams, Planner, Lists, Forms, Bookings and Loop – plus Clipchamp and the lightweight Visio in Microsoft 365 web experience that Microsoft now includes with most commercial plans. Copilot Chat is included as the general AI chat; the full Microsoft 365 Copilot that works across your own content is a separate per-user add-on, and it is worth being clear which of the two a quote is offering.
On the management side you get the full admin centre, security defaults enforcing multi-factor authentication, Exchange Online Protection filtering mail before it arrives, and basic mobility and security policies that can require a PIN and wipe company data from a phone. None of that is Intune, but none of it is nothing, and a small firm that switches all of it on is not undefended.
What Standard does not have is worth listing exactly, because vague talk about being ‘less secure’ helps nobody. There is no Intune Plan 1, so no compliance policies, no application protection policies and no Autopilot enrolment. There is no Entra ID P1, so no conditional access, no self-service password reset with write-back and no dynamic groups. There is no Defender for Business, so no endpoint detection and response and no central view of what the antivirus is finding. There is no Defender for Office 365 Plan 1, so no Safe Links, no Safe Attachments and no impersonation protection in front of mail – Microsoft includes that with Business Premium, and from 1 July 2026 with the enterprise E3 plans, but not with Standard. Sensitivity labelling and data loss prevention sit on the same side of the line.
The honest reading is that Standard secures the service reasonably and the device barely. Mail filtering, multi-factor authentication and the platform’s own hardening are in place; anything that depends on knowing the state of the laptop is not. For machines that stay in an office and staff who handle nothing regulated, that may be acceptable for now. Laptops leaving the building, regulated data, an insurer asking how devices are managed, or a phishing incident that got further than it should, each turn Business Premium from an upsell into the correct answer.
Full reference
Standard against Premium, component by component
| Capability | Business Standard | Business Premium |
|---|---|---|
| Desktop, web and mobile apps | Yes | Yes |
| Exchange mailbox, Teams, SharePoint | Yes, 50 GB mailbox | Yes, 50 GB mailbox with 1.5 TB auto-expanding archive |
| Multi-factor authentication | Yes, through security defaults | Yes, with conditional access policies |
| Device management | Basic mobility and security | Intune Plan 1 |
| Identity | Entra ID free tier | Entra ID Plan 1 |
| Endpoint detection and response | No | Defender for Business |
| Mail link and attachment protection | No | Defender for Office 365 Plan 1 |
| Information protection and DLP | No | Purview Information Protection and DLP |
| Windows business edition rights | No | Yes, for devices already licensed for Windows Pro |
| Shared computer activation | No | Yes |
Installation and activation, in practice
- Five PCs or Macs, five tablets and five phones per user, all activated by signing in.
- The licence lives in the user profile, so moving to a new machine is a sign-in rather than a key.
- A machine offline for more than 30 days enters reduced functionality mode until it can check in again.
- Shared computer activation is not part of this plan, so a session host or non-persistent VDI needs Business Premium or a plan that includes Microsoft 365 Apps for enterprise.
- Access installs on Windows only; a Mac user in the same tenant cannot open an Access database locally.
What happens if the subscription lapses
| Stage | Duration | What it means |
|---|---|---|
| Expired | 30 days | Users and admins carry on as normal and the subscription can be reactivated |
| Disabled | 90 days | Users lose access and the apps show unlicensed and go read-only; admins can still reach and export data |
| Deleted | After that | Data is permanently deleted and cannot be restored by buying the same subscription again |
Deleting a subscription outright is not the same as letting it expire: SharePoint and OneDrive content goes immediately in that case, skipping the expired and disabled stages entirely.
Buying it sensibly
- Split the estate rather than standardising: Basic for mail-first staff, Standard for document workers, Premium for anyone with a laptop that leaves the building.
- Remember the 300-seat ceiling applies across the Business family as a whole, not per plan.
- Check whether the quote names the version with or without Teams, since Microsoft sells both.
- Ask whether Copilot on the quote means the included Copilot Chat or the paid Microsoft 365 Copilot add-on.
- Consider the non-subscription route honestly: a perpetual Office Home & Business 2024 licence paired with Business Basic gives installed apps with no recurring software fee, at the cost of new features, one device per licence and a fresh purchase at the next version.
When a licence is the actual fix
For most people in most offices, Microsoft 365 Business Standard is the licence that matches the work: installed applications, a real mailbox, and collaboration services that stop documents living in mail attachments. Arco supplies it along with the rest of the range, and the check worth doing before ordering is the split between Basic, Standard and Premium across your staff, because one plan for everybody is almost always the more expensive answer. Send a rough breakdown of roles and we will say which seats need desktop applications, which would be better on Basic, and which laptops should be on Premium for the device management Standard does not include.
Questions people ask about this
Does Business Standard include Access?
Yes, on Windows PCs. Microsoft lists Access with Business Standard, Business Premium, Apps for business and the enterprise plans. There is no Access for Mac, so a mixed estate sharing a database needs a plan for the Mac users.
Can two people share one Business Standard licence?
No. It is a per-user subscription and each named person needs their own. The five installations of each device type exist so one person can work on a desktop, a laptop and a phone, not so a licence can be shared between colleagues.
Do I need Business Premium just to get multi-factor authentication?
No, and this is often sold wrongly. MFA is available on every plan through security defaults at no extra cost. What Premium adds is conditional access, which decides the circumstances under which MFA is demanded and blocks sign-ins that fail your rules, along with Intune, Defender for Business and Defender for Office 365 Plan 1.
What happens to our mail and files if the subscription lapses?
There is a 30-day expired stage where nothing changes, then a 90-day disabled stage where users lose access and the apps go read-only but admins can still export data, and after that the data is deleted permanently. If you are letting a subscription go, export mailboxes and files during the disabled window rather than relying on the dates.
Can I use Business Standard on a remote desktop server?
No. Office on a shared session host requires shared computer activation, and Microsoft lists that as available with plans including Microsoft 365 Apps for enterprise, plans including the desktop Visio or Project apps, and Microsoft 365 Business Premium. Business Standard and Apps for business are named as not supporting it.
