Microsoft 365 for small business

If you run a small business and want email, documents, file storage, and meetings in one place, Microsoft 365 is the obvious default. The pitch is straightforward: a few pounds (or dollars) per user per month gets you the same tools the largest enterprises use, with no servers to maintain.

Which plan to pick

Under 300 users, you're in the Microsoft 365 Business family. The three main plans:

• Business Basic — web and mobile Office, Exchange, OneDrive, Teams. No desktop apps. Cheapest.
• Business Standard — adds installable desktop Office apps. The most common starting point.
• Business Premium — adds Intune for device management, Defender for Business for endpoint protection, Entra ID P1 (Conditional Access), and Azure Information Protection P1 (sensitivity labels). The right choice if security matters.

A standalone Apps for Business plan covers desktop Office without the cloud services, but most teams want the bundle.

| Plan | Desktop apps | Intune + Defender for Business | Conditional Access | Typical price position | | --- | --- | --- | --- | --- | | Business Basic | No | No | No | Cheapest, web/mobile only | | Business Standard | Yes | No | No | Mid — most common starting point | | Business Premium | Yes | Yes | Yes (Entra ID P1) | Highest — the security-first choice |

All three plans share the same 300-user cap; a business that expects to cross that line within a year or two is often better served planning the move to the Enterprise (E3/E5) family early, rather than migrating identities and licences under pressure once the cap is actually hit.

A sensible first-week setup

1. Buy the right number of licences and assign them to users in the admin center.
2. Add and verify your domain (yourcompany.com) and switch email DNS to Exchange Online.
3. Set up users, with strong unique passwords and MFA enforced for everyone — non-negotiable.
4. Migrate email from your existing provider (Microsoft has migration tools for Gmail, IMAP, and on-prem Exchange).
5. Create Teams for each department or project. Teams will provision the SharePoint sites and shared mailboxes for you.
6. Move files into the right places — personal in OneDrive, shared in SharePoint or a Teams channel.
7. Install Office on staff devices and turn on Known Folder Move so Desktop, Documents, and Pictures back up to OneDrive automatically.

A minimum security baseline

• MFA for every user.
• Conditional Access blocking legacy authentication.
• A simple set of sensitivity labels (Public, Internal, Confidential).
• A Defender for Business roll-out on company-managed devices.
• A backup story — Microsoft 365 Backup, a third-party SaaS backup, or both — beyond the built-in retention.

That gets you to a calm, well-run baseline that scales as the company grows.

When to bring in a partner

A CSP (Cloud Solution Provider) partner earns its margin in three places a solo small-business owner usually can't cover alone: procurement (bundling licences, handling billing, sometimes better pricing than direct self-service purchase), initial security configuration (Conditional Access, Intune baselines, and Defender for Business are all one-time setup work that's easy to get wrong and expensive to unwind later), and ongoing support (a help desk for password resets and device issues, so the business owner isn't the de facto IT department). A business with no dedicated IT hire and no time to learn the admin center in depth is the clearest case for a partner; a business with an existing IT-literate owner or a part-time contractor comfortable in the admin center can reasonably go direct and still land on a solid baseline, provided the security steps above aren't skipped under time pressure.

Frequently asked questions

What's the single most common small-business Microsoft 365 mistake? Buying licences and enabling nothing beyond default settings — MFA not enforced, no Conditional Access, no sensitivity labels, no backup story beyond the built-in recycle bin and retention. The suite is secure-capable out of the box, but very little of that capability is switched on by default; a tenant left entirely at defaults is running with meaningfully less protection than the plan actually paid for.

Can a small business run entirely without an on-premises server? Yes — this is, in fact, the normal case for a company starting fresh on Microsoft 365 today. File storage moves to OneDrive and SharePoint, email to Exchange Online, and any remaining line-of-business app either has a cloud equivalent or runs on a small Azure VM if it genuinely needs one; very few small businesses need on-premises infrastructure purely to support Microsoft 365 itself.