Microsoft 365 licensing waste is almost universal in growing organizations. Licenses accumulate through hiring, attrition, and org changes. Add-ons get purchased for features already included in the base license. The wrong tier gets assigned to the wrong people. This checklist walks through a structured audit to find and reclaim that spend.
28%
Average M365 licensing waste across SMBs - a combination of unassigned seats, wrong license tiers, and security features that were never activated.
Common Sources of Licensing Waste
| Waste Type | Common Cause | Typical Recovery |
|---|---|---|
| Unassigned seats | Employee departures not cleaned up | Remove from subscription at renewal |
| Orphaned accounts | Disabled users still holding licenses | Remove license before disabling account |
| Tier mismatch | Frontline workers on E3, knowledge workers on Basic | Right-size to role requirements |
| Duplicate add-ons | Purchasing features already in base license | Cancel overlapping subscriptions |
| Inactive users | No sign-in or service usage in 90+ days | Downgrade or remove license |
1
Inventory Your Current Subscriptions
Admin Center → BillingPull a full subscription list from Billing → Your products
Note every active subscription, its license count, assigned count, and next renewal date.
Flag any subscription where assigned < purchased
The difference between purchased and assigned seats is immediately recoverable waste - document the gap for each subscription.
Map all add-on subscriptions against your base licenses
Use the M365 Maps tool (m365maps.com) to verify which features are already included in your base tier before paying for add-ons.
Note all renewal dates - plan audit 30–45 days ahead
License changes typically take effect at the next billing cycle. Running the audit too close to renewal limits your options.
2
Review Assigned vs. Active Usage
Admin Center → ReportsRun the M365 Usage report (Reports → Usage → Microsoft 365)
Review active users per product over the last 30 and 90 days. Users with zero activity on a product are candidates for downgrade.
Identify users with no sign-in activity in 90+ days
Run a sign-in report from Entra → Monitoring → Sign-in logs. Filter by date range. Consider whether accounts should be disabled or licenses removed.
Check for disabled accounts still holding licenses
In Microsoft 365 admin center, filter users by "Sign-in blocked" and check for active license assignments. These are pure waste.
Review shared mailboxes and resource accounts for unnecessary licenses
Shared mailboxes do not require a license in most cases. Room and equipment mailboxes rarely need full M365 licenses.
3
Match Users to the Right License Tier
Spreadsheet analysisCreate a user-to-role mapping: what does each person actually use?
Columns: user, current license, services used (email, Teams, SharePoint, Defender, Intune), role type. 30 minutes of work here saves thousands per year.
Identify users on E3 or Business Premium who only use email
Email-only users can typically be served by Exchange Online Plan 1 (~$4/user/month) rather than full M365 Business Standard (~$12.50).
Identify users paying separately for Intune, Defender, or Entra P1 who could consolidate to Business Premium
Business Premium (~$22/user/month) includes Intune, Defender for Business, and Entra ID P1 - if you're buying these as add-ons, consolidation likely saves money.
Flag any frontline or task workers who could use F1/F3 licenses
F1 ($2.25/user/month) and F3 ($8/user/month) are designed for shift workers without persistent devices. Significant savings for the right roles.
4
Check for Unused Security Features
Security & Compliance portalsVerify Defender for Office 365 features are actually active
Many tenants pay for Defender for Office 365 Plan 1 but never configured Safe Links, Safe Attachments, or anti-phishing policies. Check security.microsoft.com → Policies.
Check whether Intune is licensed but not deployed
Intune is included in Business Premium and E3. If devices are not enrolled and managed, you're paying for a capability with zero return.
Review Purview / compliance features that are licensed but unconfigured
DLP, sensitivity labels, retention policies, and eDiscovery are often licensed but never set up. These represent both waste and compliance risk.
Document findings and calculate projected annual savings
Multiply monthly per-user savings by 12 and by the number of affected users. Present to leadership with a recommended action plan before the next renewal.
Timing tip: Run this audit 45 days before your Microsoft renewal date. License reductions take effect at the next billing cycle - you need lead time to act on what you find.