This chapter covers Microsoft 365 Education plans, which are specialized licensing offerings for academic institutions. Understanding these plans is critical for the MS-900 exam because they appear in approximately 10-15% of questions across domains like pricing, licensing, and deployment scenarios. You will learn the specific plan tiers (A1, A3, A5), their features, who qualifies, and how they differ from commercial plans. The exam tests your ability to recommend the appropriate plan based on user roles (student vs. faculty) and institutional needs (e.g., compliance, security).
Jump to a section
Think of Microsoft 365 Education plans like a school cafeteria with three meal tiers: A1, A3, and A5. The A1 plan is the 'basic tray' – it includes a main dish (Office for the web) and water (50 GB mailbox) but no dessert (desktop apps) or premium toppings (advanced security). The A3 plan is the 'full meal' – you get the tray plus a dessert (desktop Office apps), a drink (Power Automate for education), and a side (basic compliance). The A5 plan is the 'deluxe feast' – everything in A3 plus extra courses like a gourmet dessert (Microsoft 365 Defender), a premium drink (Microsoft Purview compliance), and a VIP lounge (Azure Information Protection). Each tier builds on the lower one: you cannot skip A3 to get A5 without paying for the full stack. The school's IT director chooses the tier per user based on roles – teachers often get A3 or A5, students often get A1. Importantly, the cafeteria enforces 'student use benefit': faculty and staff pay full price, but students get A1 for free and A3/A5 at a steep discount. Just as a meal tray cannot be upgraded mid-bite without returning to the counter, licenses must be assigned before use and can be reassigned at any time, but changes take effect only on the next login. The analogy breaks if you think of 'free' as no cost – A1 for students is free, but A1 for faculty still requires a license cost (though often included in qualifying subscriptions).
What Are Microsoft 365 Education Plans?
Microsoft 365 Education plans are licensing suites designed specifically for academic institutions – primary/secondary schools (K-12), higher education (colleges, universities), and vocational schools. They provide productivity, collaboration, security, and compliance tools at significantly reduced costs compared to commercial Enterprise plans. The key distinction is that these plans are available only to qualified educational institutions, which must enroll through Microsoft's Education Solutions program. Pricing is based on Full-Time Equivalent (FTE) enrollment, and institutions must verify their academic status annually.
Why Education Plans Exist
Microsoft offers Education plans to fulfill its mission of empowering students and educators worldwide. The pricing model is heavily subsidized – in many cases, students get core services for free (A1), while faculty and staff pay a fraction of commercial rates. This allows schools to provide modern tools without straining budgets. The plans also include unique features like classroom-specific tools (e.g., Microsoft Teams for Education, Intune for Education) and compliance with educational data privacy regulations (e.g., FERPA, GDPR).
The Three Tiers: A1, A3, A5
Microsoft 365 Education plans come in three tiers, each building on the previous:
A1: The free or low-cost entry tier. Includes Office for the web (Word, Excel, PowerPoint, OneNote, Outlook), 50 GB mailbox, 1 TB OneDrive storage, Microsoft Teams, SharePoint Online, Exchange Online, and basic security (e.g., Microsoft Defender for Office 365 Plan 1 for anti-malware, anti-spam). It does NOT include desktop Office apps, advanced compliance, or advanced threat protection. A1 is typically free for students; for faculty, it may be included with qualifying subscriptions or available at a minimal cost.
A3: The mid-tier plan. Adds desktop Office apps (Word, Excel, PowerPoint, Outlook, Publisher, Access) for installation on up to 5 PCs/Macs and 5 mobile devices per user. Also includes Power Automate for education, Microsoft Forms, and basic compliance features like retention policies. A3 includes Microsoft 365 Apps for enterprise (formerly Office ProPlus) and more advanced security (e.g., Microsoft Defender for Office 365 Plan 1 with anti-phishing). A3 is the most common plan for faculty and staff.
A5: The premium tier. Includes everything in A3 plus advanced security, compliance, and analytics. Key additions: Microsoft 365 Defender (EDR, threat analytics), Microsoft Purview compliance (eDiscovery, audit, data loss prevention, information protection), Azure Information Protection (sensitivity labels), Microsoft Cloud App Security, and Power BI Pro. A5 is designed for institutions with strict regulatory requirements or those needing top-tier threat protection.
Licensing Rules and Restrictions
Student Use Benefit: Microsoft defines 'student' as a full-time or part-time student enrolled in a degree-granting program. Students can use A1 for free. A3 and A5 for students are available at a heavily discounted price (typically 20-30% of commercial). Faculty and staff must be assigned A3 or A5 (or A1 if included) and pay the full Education price (still lower than commercial).
Qualified Users: Only users with a verified academic email domain (e.g., .edu in the US) or through Microsoft's enrollment process can be assigned Education licenses. Institutions must provide proof of accreditation.
License Assignment: Licenses are assigned per user. You can mix tiers within the same tenant – e.g., students get A1, teachers get A3, IT staff get A5. Licenses are not additive; assigning A5 does not give you A1 features separately.
Feature Differences from Commercial: Education plans lack some commercial features like Microsoft 365 Business Voice (now part of Teams Phone) or certain advanced analytics. Also, Education plans do not include Windows 10/11 Enterprise – for that, you need Microsoft 365 A3/A5 for Faculty (which includes Windows) or separate Windows Education licenses.
How It Works: Enrollment and Activation
Institution Enrollment: The school's IT administrator goes to the Microsoft Education portal (https://www.microsoft.com/en-us/education) and signs up with a verified academic domain. Microsoft validates the institution's status via third-party databases (e.g., NACUBO, NCES).
Tenant Creation: If the school already has a Microsoft 365 tenant, it can add Education subscriptions. Otherwise, a new tenant is created with the academic domain.
License Purchase: The institution purchases subscriptions through Microsoft Volume Licensing (EES, OVS-ES) or directly via the Microsoft 365 admin center. For free A1 student licenses, no purchase is needed – they are automatically available.
User Provisioning: Users are created in Azure AD (via sync from on-premises AD, CSV import, or manual creation). Each user is assigned a license based on role.
Feature Activation: Once licensed, users can access features. Desktop apps require installation (via Click-to-Run). Security features like Defender may require additional configuration.
Key Components and Defaults
OneDrive Storage: 1 TB per user for A1, A3, A5. Schools can request up to 5 TB per user for faculty via support.
Exchange Online Mailbox: 50 GB for A1, 100 GB for A3/A5. No archive mailbox included by default; A5 includes archive (1.5 TB).
Microsoft Teams: Included in all tiers. Education-specific features like Class Teams, Assignments, and Grades are available only in Education tenants.
Azure AD: All plans include Azure AD Free. A3 and A5 include Azure AD Plan 1 (for conditional access, self-service password reset). A5 includes Azure AD Plan 2 (Identity Protection, Privileged Identity Management).
Microsoft 365 Defender: A1 includes Defender for Office 365 Plan 1 (basic anti-malware, anti-spam). A3 includes Plan 1 plus anti-phishing. A5 includes Plan 2 (threat investigation, automated response).
Microsoft Purview: A5 includes full compliance suite (eDiscovery, audit, DLP, information protection). A3 includes basic retention policies and eDiscovery (limited).
Configuration and Verification
To check current licenses in the Microsoft 365 admin center:
Navigate to Billing > Licenses.
View the list of subscriptions – Education plans are labeled as 'Microsoft 365 A1 for Faculty', 'Microsoft 365 A3 for Students', etc.
Click on a subscription to see assigned users.
To assign a license via PowerShell:
Install-Module -Name MSOnline
Connect-MsolService
Set-MsolUser -UserPrincipalName user@school.edu -UsageLocation US
Set-MsolUserLicense -UserPrincipalName user@school.edu -AddLicenses "school:STANDARDWOODPACK"Note: The license SKU ID varies by plan. Common SKUs:
A1 for Students: STANDARDWOODPACK
A3 for Faculty: ENTERPRISEPACK (but with education discount)
A5 for Faculty: ENTERPRISEPREMIUM
Interaction with Related Technologies
Windows 10/11 Education: Separate license, often included in Microsoft 365 A3/A5 for Faculty or purchased via Microsoft Enrollment for Education Solutions (EES).
Intune for Education: Included in A3 and A5 (device management). A1 includes Intune for Education only for mobile devices.
Power BI Pro: Included in A5 only. For A1/A3, Power BI Pro must be purchased separately.
Azure Information Protection: A5 includes P1 (sensitivity labels). P2 requires additional purchase.
Exam-Relevant Details
Free vs. Paid: A1 for students is free; A1 for faculty may be included with qualifying subscriptions but is not universally free. The exam often tests that students can get A1 at no cost.
Desktop Apps: Only A3 and A5 include desktop Office apps. A1 includes only web and mobile apps.
Security Features: A5 includes Microsoft 365 Defender and Microsoft Purview. A3 includes basic security (Defender for Office 365 Plan 1). A1 includes only anti-malware and anti-spam.
Compliance: A5 is required for advanced compliance (eDiscovery, DLP, information protection). A3 includes only basic retention.
Student vs. Faculty Licensing: Faculty cannot use student licenses. The exam may present a scenario where a teacher needs desktop apps – the correct answer is A3 or A5 for Faculty.
Qualifying Institutions: Only accredited academic institutions. The exam may ask which organization qualifies – e.g., a public K-12 school qualifies, but a corporate training center does not.
Enroll institution in Education program
The IT administrator visits the Microsoft Education portal and initiates enrollment with the institution's verified academic domain. Microsoft validates accreditation using third-party databases like NCES (National Center for Education Statistics) for US schools or similar bodies globally. This process can take 1-5 business days. Once approved, the institution can purchase Education subscriptions at discounted rates. Without enrollment, only commercial plans are available. The domain must be registered as an academic domain in Azure AD – this is a one-time setup.
Choose and purchase subscription tiers
Based on user roles, the admin selects A1, A3, or A5 for students and faculty. For students, A1 is free; A3 and A5 require purchase. For faculty, all tiers require purchase (though A1 may be included in some volume licensing agreements). Subscriptions are purchased through Volume Licensing (EES, OVS-ES) or directly in the admin center. The admin must specify the number of licenses for each SKU. Licenses are per-user per-month, with annual commitment options. The admin can mix tiers – e.g., 500 A1 for students, 50 A3 for teachers, 5 A5 for IT.
Create user accounts in Azure AD
Users are created in Azure Active Directory, either by syncing from on-premises AD using Azure AD Connect, importing a CSV file, or manually creating accounts. Each user must have a user principal name (UPN) ending with the verified academic domain (e.g., student@school.edu). The admin sets usage location (important for compliance and pricing). For students, the 'Student' attribute can be set (optional) to enable education-specific features like Class Teams. Users must be created before license assignment.
Assign licenses to users
In the Microsoft 365 admin center, the admin navigates to Billing > Licenses, selects the subscription, and assigns licenses to users. Alternatively, PowerShell can be used for bulk assignment. Each user gets a license based on their role – e.g., all students get A1, all teachers get A3. Licenses are consumed immediately upon assignment. If a user is assigned a license but the subscription is at capacity, assignment fails. The admin must ensure sufficient license count. License assignment can be changed at any time, but features may take up to 24 hours to activate.
Configure education-specific features
After licensing, the admin enables education features: creating Class Teams in Microsoft Teams, setting up Intune for Education policies, configuring compliance policies (e.g., retention for student records), and enabling security defaults. For A5, advanced features like Microsoft 365 Defender and Microsoft Purview require additional setup – e.g., turning on audit logging, creating DLP policies, configuring sensitivity labels. The admin may also need to customize the SharePoint and OneDrive settings for education (e.g., restricting external sharing). Finally, users are notified to install Office apps (if licensed for desktop) and start using services.
Scenario 1: Large University Migrating to Microsoft 365 Education
A public university with 30,000 students and 5,000 faculty/staff decides to migrate from Google Workspace to Microsoft 365 Education. The IT team enrolls the institution and purchases 30,000 A1 for Students (free) and 5,000 A3 for Faculty (paid). They use Azure AD Connect to sync from on-premises Active Directory. During migration, they discover that many faculty need advanced security for research data – so they upgrade 200 faculty to A5. The challenge: managing license distribution across departments. They use PowerShell scripts to assign licenses based on AD group membership. Performance considerations: with 35,000 users, the tenant must be properly sized – they request a tenant limit increase from Microsoft support to handle the volume. Common misconfiguration: assigning A1 to faculty who need desktop apps – they later correct this by purchasing A3 for all faculty. The migration takes 6 months, with phased rollout by college.
Scenario 2: K-12 School District with Limited Budget
A K-12 district with 10,000 students and 1,000 teachers needs to provide Office tools but has a tight budget. They choose A1 for all students (free) and A3 for teachers (paid). They also purchase Intune for Education for device management (included in A3). The IT admin sets up Class Teams for each grade level. Problem: teachers need to record lectures – A3 includes Microsoft Stream (for recording), but they find that Stream storage counts against OneDrive quota. They adjust storage limits. Another issue: some students need offline access – A1 only provides web apps, so they set up a computer lab with Office 2019 (purchased separately). The district also uses Microsoft 365 A3 for Faculty to get Windows 10 Education upgrade rights for school-owned devices. Common mistake: they initially assigned A1 to teachers, realizing they needed desktop apps – they upgraded to A3 mid-year, which caused a brief outage for those users until the license change propagated.
Scenario 3: Compliance-Heavy Medical School
A medical school requires strict compliance with HIPAA and FERPA. They choose Microsoft 365 A5 for all faculty and staff (500 users) and A1 for students (2,000). The A5 licenses provide Microsoft Purview with eDiscovery, audit, DLP, and information protection. They configure sensitivity labels to classify patient data. They also enable Microsoft 365 Defender for advanced threat protection. Challenge: they need to retain student emails for 7 years – they set up retention policies in Purview. They discover that A5 includes unlimited archiving for Exchange Online (1.5 TB archive). Performance: they enable audit logging for all users, which generates large volumes of logs – they set up audit log retention for 10 years (A5 allows up to 10 years). Misconfiguration: they initially assigned A3 to some researchers, but found that A3 did not include the required DLP policies – they upgraded to A5. The school also uses Azure Information Protection P2 (included in A5) to automatically label emails containing protected health information.
What MS-900 Tests on Education Plans
The MS-900 exam objective 4.1 (Identify appropriate Microsoft 365 pricing and licensing options) includes Education plans. Specific sub-objectives:
Describe the differences between A1, A3, and A5.
Identify which features require A3 vs. A5.
Understand student vs. faculty licensing rules.
Recognize qualifying institutions.
Common Wrong Answers and Why
'A1 includes desktop Office apps.' This is false. Only A3 and A5 include desktop apps. Candidates confuse 'Office for the web' with full desktop apps. The exam may phrase: 'A teacher needs to install Office on their laptop. Which plan?' The wrong answer is A1.
'Students can use A3 for free.' False. Only A1 for students is free. A3 and A5 for students require payment (though discounted). Candidates may think all student plans are free.
'A5 is required for all security features.' Partially true – A5 includes advanced security, but A3 includes basic security (Defender for Office 365 Plan 1). The exam may ask: 'Which plan includes Microsoft 365 Defender?' The answer is A5, but A3 includes Defender for Office 365 Plan 1 (not full Defender). Candidates must distinguish between Defender for Office 365 and Microsoft 365 Defender.
'Faculty can use student licenses.' False. Faculty must be assigned Faculty licenses. Student licenses are restricted to students. The exam may present a scenario where a school assigns A1 for Students to a teacher – this is invalid.
Specific Numbers and Terms on the Exam
A1: Free for students; includes web apps, 50 GB mailbox, 1 TB OneDrive.
A3: Desktop apps, Power Automate, basic compliance.
A5: Microsoft 365 Defender, Microsoft Purview, Azure Information Protection, Power BI Pro.
Student Use Benefit: Key phrase – students get free A1.
Qualified Users: Accredited academic institutions only.
License Assignment: Per user, mixable.
Edge Cases and Exceptions
What if a student graduates? The license should be removed or converted to an alumni license (if available). The exam may ask about license management for departing users.
Can a school use commercial plans instead? Yes, but they lose education discounts and features. The exam may test that Education plans are more cost-effective.
Does A1 include Teams? Yes, but only basic Teams. Advanced features like live events require A3 or A5.
Are Education plans available for non-profit schools? Yes, if they are accredited.
How to Eliminate Wrong Answers
If a question mentions 'desktop Office apps', eliminate A1.
If a question mentions 'advanced compliance' or 'eDiscovery', choose A5.
If a question mentions 'students', remember they qualify for free A1.
If a question mentions 'faculty', they must use Faculty licenses (not student).
Look for keywords: 'basic security' -> A3; 'advanced threat protection' -> A5.
Microsoft 365 Education plans come in three tiers: A1 (free for students, web-only), A3 (desktop apps, basic security), A5 (advanced security and compliance).
Only A1 for Students is free; A3 and A5 for students are discounted but paid. Faculty licenses are always paid (though A1 may be included in some agreements).
A1 lacks desktop Office apps; A3 and A5 include them. This is a key differentiator on the exam.
A5 includes Microsoft 365 Defender, Microsoft Purview (full compliance), Azure Information Protection, and Power BI Pro. A3 includes only basic security and compliance.
Student licenses cannot be assigned to faculty; faculty must use Faculty licenses.
Education plans require institutional enrollment and verification of academic status.
Licenses are per-user and can be mixed within the same tenant (e.g., students get A1, teachers get A3).
Windows 10/11 Education is not included in Microsoft 365 Education plans – it is a separate license.
The 'Student Use Benefit' allows students to use A1 at no cost, but they must be enrolled in a qualifying institution.
Advanced compliance features (eDiscovery, DLP, information protection) require A5.
These come up on the exam all the time. Here's how to tell them apart.
Microsoft 365 A1
Free for students; low cost for faculty
Includes Office for the web only (no desktop apps)
50 GB mailbox per user
Basic security (anti-malware, anti-spam)
No advanced compliance or analytics
Microsoft 365 A3
Paid for all users (students discounted)
Includes desktop Office apps (install on up to 5 devices)
100 GB mailbox per user
Basic security plus anti-phishing (Defender for Office 365 Plan 1)
Basic compliance (retention policies, eDiscovery basics)
Microsoft 365 A3
Desktop Office apps included
Basic eDiscovery and retention
No Microsoft 365 Defender (only Defender for Office 365 Plan 1)
No Azure Information Protection
No Power BI Pro
Microsoft 365 A5
All A3 features plus advanced security
Full eDiscovery (Advanced eDiscovery), audit, DLP, information protection
Includes Microsoft 365 Defender (EDR, threat analytics)
Includes Azure Information Protection (sensitivity labels)
Includes Power BI Pro
Student License
Restricted to enrolled students
Free A1 available; A3/A5 discounted
Cannot be assigned to faculty or staff
Designed for learning and personal use
May have feature restrictions (e.g., no Power Automate in A1)
Faculty License
For teachers, staff, and administrators
All tiers are paid (no free tier, though A1 may be included)
Full feature set per tier
Includes administrative tools (e.g., Power Automate, advanced security)
Compliance with institutional policies
Mistake
Microsoft 365 A1 includes the full desktop version of Office.
Correct
A1 includes only Office for the web (browser-based) and mobile apps. Desktop Office apps (Word, Excel, etc.) are only available in A3 and A5. This is a common trick on the exam – they ask 'Which plan allows offline editing on a laptop?' and the correct answer is A3 or A5, not A1.
Mistake
All Microsoft 365 Education plans are free for students.
Correct
Only A1 for Students is free. A3 and A5 for Students are available at a discounted price but are not free. The exam may ask: 'A student needs to install Office on their personal computer. Which plan is free?' The answer is none – A1 does not include desktop apps, so the student would need A3 (paid) or use web apps.
Mistake
Faculty can use student licenses to save money.
Correct
Faculty and staff must be assigned Faculty licenses (e.g., Microsoft 365 A3 for Faculty). Student licenses are restricted to enrolled students. Using a student license for a faculty member violates Microsoft's licensing terms and can result in audit penalties. The exam tests this distinction.
Mistake
A5 is only for compliance and security; A3 has the same productivity features.
Correct
While both A3 and A5 include desktop Office apps and Teams, A5 adds Power BI Pro, Azure Information Protection, Microsoft 365 Defender, and advanced compliance. A3 lacks these. For example, A3 includes only basic eDiscovery (search and hold), while A5 includes full eDiscovery (Advanced eDiscovery with analytics and review).
Mistake
Education plans include Windows 10/11 Enterprise licenses.
Correct
Microsoft 365 Education plans do not include Windows licenses. To get Windows, institutions need to purchase Windows 10/11 Education separately (often through the same volume licensing program) or use Microsoft 365 A3/A5 for Faculty which may include Windows upgrade rights. The exam may ask: 'Which plan includes Windows?' and the correct answer is none – it's a separate license.
Reveal each answer, then mark whether you got it right. Score 60%+ to unlock the next chapter.
A1 is the free/basic tier for students – includes Office for the web, 50 GB mailbox, 1 TB OneDrive, and basic security. A3 adds desktop Office apps, 100 GB mailbox, basic compliance (retention), and improved security (anti-phishing). A5 includes everything in A3 plus advanced security (Microsoft 365 Defender), full compliance (Microsoft Purview with eDiscovery, DLP, information protection), Azure Information Protection, and Power BI Pro. On the exam, remember that desktop apps start at A3, and advanced security/compliance starts at A5.
Only the A1 plan is free for students. A3 and A5 for students are available at a discounted price but are not free. The exam often tests this: 'Which plan can a student get for free?' Answer: A1. Also note that faculty and staff do not get any free plans (though A1 may be included in some volume licensing agreements, it is not universally free).
No. Student licenses are restricted to enrolled students. Faculty and staff must use Faculty licenses (e.g., Microsoft 365 A3 for Faculty). Assigning a student license to a teacher violates licensing terms. On the exam, if a scenario involves a teacher needing Office, the correct answer is A3 or A5 for Faculty, not A1 for Students.
A3 includes Microsoft Defender for Office 365 Plan 1 (anti-malware, anti-spam, anti-phishing). A5 includes Microsoft 365 Defender (which includes Defender for Endpoint, Defender for Identity, Defender for Office 365 Plan 2, and Cloud App Security). A5 also includes Azure Information Protection P1 (sensitivity labels) and Microsoft Purview compliance (DLP, eDiscovery, audit). The exam may ask: 'Which plan includes Microsoft 365 Defender?' Answer: A5.
Yes. Microsoft 365 Education plans do not include Windows licensing. To use Windows 10/11 Education, you need to purchase it separately through the Microsoft Enrollment for Education Solutions (EES) or other volume licensing programs. Some bundles like Microsoft 365 A3/A5 for Faculty may include Windows upgrade rights, but this is not standard. On the exam, remember that Office and Windows are separate licenses.
The Student Use Benefit allows enrolled students to use Microsoft 365 A1 at no cost. This benefit is available to all qualifying academic institutions. Students get access to web and mobile Office apps, 1 TB OneDrive, Teams, and basic security. The benefit does not extend to faculty or staff. The exam may ask: 'What is the Student Use Benefit?' Answer: Free A1 for students.
Yes. You can assign different license tiers to different users. For example, students can have A1, teachers A3, and IT staff A5. This is common in schools to balance cost and features. The exam may present a scenario: 'A school wants to give students free access to Office web apps, teachers desktop apps, and administrators advanced security.' The answer is to assign A1 to students, A3 to teachers, and A5 to administrators.
You've just covered Microsoft 365 Education Plans — now see how well it sticks with free MS-900 practice questions. Full explanations included, no account needed.
Done with this chapter?