Microsoft 365 licensing has a gravity all its own: licenses get added in a hurry, plans get chosen once and never revisited, and the monthly bill drifts upward on autopilot while nobody’s exactly sure what half the line items do. The result, in nearly every tenant we review, is the same happy discovery: real money — and often better security — hiding in an hour of license housekeeping. Here’s how to run that hour.

First, hunt the pure waste

Three patterns cover most of it:

Licenses assigned to nobody. Departed employees whose licenses were never reclaimed (offboarding should release them after the data-preservation step — a shared-mailbox conversion keeps the mail without the monthly fee), plus test accounts and forgotten service accounts each quietly holding a full seat. The admin center’s inactive-users view finds these in minutes.

Duplicated spend. The tenant includes tools the company is buying separately: Teams alongside a paid Zoom, OneDrive/SharePoint alongside a paid Dropbox, Bookings alongside a scheduling app, Entra ID features alongside a third-party SSO tool. Sometimes the standalone tool is genuinely better for you — but that should be a decision, not an accident of history, and the review is where the accident gets noticed.

Everyone on the same plan regardless of role. The warehouse crew and shop floor rarely need the full desktop Office suite; frontline-style or lower-tier licenses at a fraction of the cost fit “email and Teams on a phone” roles fine. Mixed licensing inside one tenant is fully supported and routinely trims 15–25% off the bill in businesses with non-desk staff.

Then check the opposite problem: underbuying security

Here’s the counterintuitive half of most reviews: many businesses on Business Standard are simultaneously overpaying (per the waste above) and underbuying — because the security capabilities they’re bolting on separately, or living without, are bundled in Business Premium. Premium’s uplift over Standard buys, in one line item: Intune for device management, Conditional Access for real sign-in policy, Defender for Office 365 (the advanced email filtering layer), and encryption/information-protection tooling — a list that overlaps heavily with what your cyber insurer is asking about. The math frequently lands in a surprising place: reclaiming the waste from step one funds the Premium uplift for the people who need it, netting stronger security at a flat or lower total. That’s the trade worth running your actual numbers on — role by role, since mixing Standard and Premium by exposure level is fine too.

Two smaller checks while you’re in there: annual vs. monthly commitment (annual pricing is meaningfully cheaper; commit annually for the stable core of the roster, stay monthly for seasonal or uncertain seats — a natural fit for high-turnover industries), and add-ons that accumulated — trial-era Copilot seats, Power BI licenses from a project that ended, audio conferencing nobody dials into anymore.

Make it a ritual, not a rescue

The review decays without a rhythm, so give it one: once a year, an hour, alongside the IT budget pass — pull the license report, reconcile against the actual roster, re-ask the plan-mix question, and calendar the renewal date so pricing changes arrive as line items instead of surprises. Tie the reclaim step into offboarding permanently so unused seats stop accumulating between reviews. If you’re on a managed plan, this should simply be done for you — it’s part of our quarterly and annual reviews, for the slightly self-defeating reason that a client’s licensing waste is the easiest savings we can ever hand them.

The bottom line

Microsoft 365 bills grow by default and shrink only on purpose. One hour a year — reclaim the ghost seats, kill the duplicate spend, fit plans to roles, and run the Standard-vs-Premium security math honestly — reliably pays for itself several times over, and more often than not leaves the company better protected than before the review started. Few hours in IT administration have a better rate.