Migrating Microsoft workloads to public cloud introduces licensing complexities that can significantly affect compliance and total cost of ownership. Microsoft’s licensing rules differ substantially depending on whether workloads run on Azure (where Microsoft offers the most favourable terms), AWS, or Google Cloud Platform (where “Listed Provider” restrictions apply). This guide covers BYOL vs provider-included licensing, Azure Hybrid Benefit, License Mobility, dedicated host requirements, and common compliance pitfalls.
Cloud providers offer two fundamental approaches to licensing Microsoft software in their environments. Understanding the distinction is the starting point for any cloud migration licensing strategy.
The cloud provider includes the cost of the Microsoft licence in the hourly or monthly VM pricing. The organisation pays a higher compute rate that covers the operating system or application licence. This is the simplest approach: no existing licences are needed, and the provider handles the Microsoft licensing relationship.
The organisation takes licences it already owns, typically from on-premises volume licensing agreements with Software Assurance, and applies them to cloud instances, paying only the lower base compute rate for the VM. Azure Hybrid Benefit (AHB) can reduce VM costs by 40–50% for organisations with existing Windows Server or SQL Server licences with Software Assurance. On AWS and GCP, BYOL is possible but subject to more restrictions due to Microsoft’s “Listed Provider” policies introduced in 2019.
An organisation migrating 100 Windows Server VMs to Azure with AHB instead of licence-included pricing can save hundreds of thousands of dollars annually. Conversely, an organisation that deploys Windows Server on AWS shared infrastructure assuming BYOL is permitted, when it is not under Listed Provider restrictions, faces both compliance exposure and the cost of retroactive licence purchases. Licensing should be treated as a first-class migration planning concern alongside technical architecture, security, and network design.
As Microsoft’s own cloud platform, Azure offers the most straightforward and flexible licensing options for migrating Microsoft workloads. Microsoft has deliberately structured Azure’s licensing terms to make it the most economically attractive destination for organisations with existing Microsoft licence investments.
AHB allows organisations to use on-premises Windows Server and SQL Server licences with active Software Assurance on Azure VMs, avoiding double-payment for licences. For Windows Server, each 16-core Datacenter licence covers up to 16 cores of Azure VMs. For SQL Server, AHB applies to both Azure VMs and Azure SQL managed services, yielding 30–50% savings. AHB represents the single largest cost optimisation opportunity for organisations migrating Microsoft workloads to Azure.
SQL Server Enterprise with Software Assurance and AHB enables an unlimited virtualisation benefit on Azure. Organisations can run any number of SQL Server instances on Azure Dedicated Hosts without licensing each VM’s cores separately, mirroring the on-premises unlimited virtualisation right. This is particularly valuable for organisations with large SQL Server estates where per-core licensing on individual VMs would be prohibitively expensive.
Azure Dedicated Host provides an entire physical server dedicated to a single customer. This satisfies licensing requirements for products that cannot be used on shared cloud infrastructure under standard terms, and enables BYOL for older licences or those without Software Assurance. Microsoft treats Azure Dedicated Host similarly to on-premises hardware from a licensing perspective, providing maximum licensing flexibility.
Azure Hybrid Benefit includes up to 180 days of simultaneous use rights during migration. The organisation can run workloads on-premises and in Azure concurrently while transitioning. This dual-use period is critical for migration testing, validation, and cutover without requiring additional licence purchases for the overlap period. AWS and GCP offer no equivalent blanket dual-use allowance.
Amazon Web Services and Google Cloud Platform are classified by Microsoft as “Listed Providers,” a designation introduced in October 2019 that imposes significant restrictions on how existing Microsoft licences can be used on their infrastructure.
Since the policy change, Microsoft has restricted the ability of customers to bring perpetual Windows Server licences to Listed Providers on shared (multi-tenant) infrastructure. On these platforms, Windows Server BYOL requires dedicated host infrastructure where the customer has sole tenancy of the physical server. Dedicated hosts provide sole tenancy but carry additional infrastructure costs and reduce the flexibility benefits that make public cloud attractive. These restrictions do not apply to Azure, creating a deliberate and substantial competitive advantage for Microsoft’s own cloud platform.
| Product | Azure | AWS / GCP (Listed Providers) |
|---|---|---|
| Windows Server (with SA) | BYOL via AHB on shared VMs; 180-day dual-use | BYOL only on dedicated hosts; no dual-use rights |
| Windows Server (without SA) | BYOL on Dedicated Host; provider-included on shared | Provider-included only (no BYOL on shared infrastructure) |
| SQL Server (with SA) | BYOL via AHB on shared VMs and managed services | BYOL via License Mobility on shared VMs (verification required) |
| SQL Server (without SA) | Provider-included or Dedicated Host BYOL | Provider-included only (no License Mobility without SA) |
| Office applications | M365 licences usable on Azure Virtual Desktop | Volume-licensed Office not permitted on shared infrastructure |
SQL Server, Exchange Server, SharePoint Server, and other eligible server applications listed in Microsoft’s Product Terms can be moved to third-party shared cloud infrastructure through License Mobility, provided the organisation has active Software Assurance. Windows Server is excluded from License Mobility. When using License Mobility on AWS or GCP, organisations must submit a verification form to Microsoft confirming the licence deployment. This administrative step is not required for Azure. SA must remain active; if SA lapses, mobility rights expire and the licences can no longer be used on third-party cloud infrastructure.
Cloud migration introduces several licensing compliance risks that organisations frequently encounter. These pitfalls can result in unexpected licence purchases, back-dated support fees, or audit findings if not identified and addressed proactively during migration planning.
The most common financial waste during migration is paying for licences twice: using provider-included VM pricing while also holding unused on-premises licences that could have been applied via BYOL. This happens when cloud teams launch VMs with licence-included images without consulting the licensing team about existing entitlements. Solution: inventory existing licences before migration and create explicit deployment procedures that ensure BYOL options (AHB on Azure, dedicated hosts on AWS/GCP) are selected when entitlements exist.
The compliance risk of deploying licences on cloud infrastructure without meeting Microsoft’s requirements. Common violations include deploying Windows Server perpetual licences (without SA) on AWS or GCP shared VMs (not permitted under Listed Provider restrictions) and deploying SQL Server without active Software Assurance on shared third-party infrastructure (License Mobility requires active SA). These violations are easily detected during Microsoft audits and result in retroactive licence purchases at list price plus back-dated support fees.
Many organisations are unaware that Microsoft treats AWS, GCP, and Alibaba Cloud differently from other hosting providers. The Listed Provider restrictions, introduced in 2019, prevent standard BYOL of Windows Server licences on shared infrastructure at these specific providers. Organisations that migrated to AWS or GCP before 2019 under previous terms may have grandfathering rights, but new licence deployments are subject to the current restrictions.
A strategic pitfall rather than a compliance issue: migrating on-premises servers directly to cloud VMs (lift-and-shift) without evaluating whether cloud-native PaaS services could replace the workload at lower cost and with simpler licensing. For example, Azure Files or SharePoint Online may replace a Windows Server file server VM, and Azure SQL Database may replace a SQL Server VM. In both cases, the PaaS service includes licensing in its pricing, eliminating BYOL complexity entirely.
Microsoft has deliberately structured licensing terms to make Azure the most attractive destination for existing Microsoft licence holders. This licensing advantage is a significant factor in cloud platform selection for organisations with substantial Microsoft licence investments.
Azure Hybrid Benefit: Up to 40–50% savings on Windows Server and SQL Server VMs by applying existing licences. No equivalent benefit on AWS or GCP. Dual-use rights: 180 days of simultaneous on-premises and Azure use during migration. AWS and GCP offer no equivalent. Extended Security Updates: Free ESUs for end-of-support products (Windows Server 2012, SQL Server 2012) on Azure. AWS and GCP require paid ESU purchases. No Listed Provider restrictions: All BYOL options are available on shared Azure infrastructure. No dedicated host requirement for Windows Server BYOL.
Many organisations choose Azure as their primary cloud for Windows and SQL Server workloads specifically because licensing economics make it 20–40% cheaper than AWS or GCP for equivalent compute capacity. Non-Microsoft workloads (Linux, open-source) may be more cost-effective on AWS or GCP where the licensing advantage does not apply. For multi-cloud strategies, the optimal approach is often running Windows/SQL on Azure and Linux/open-source on AWS for optimal cost.
| Scenario | Azure (with AHB) | AWS (Licence Included) | AWS (BYOL Dedicated Host) |
|---|---|---|---|
| Windows Server VM (8 cores, standard) | ~40% less than licence-included | Full rate (includes Windows licence) | Base rate + dedicated host fee |
| SQL Server Enterprise VM (16 cores) | ~50% less via AHB | Very high (SQL EE licence-included rate) | Base rate + SA-covered BYOL |
| Windows Server 2012 (end-of-support) | Free ESUs included | ESU purchase required | ESU purchase required |
Azure consistently delivers 20–50% lower total cost of ownership for Microsoft workloads through AHB and included ESU benefits. The cost advantage is most pronounced for SQL Server Enterprise workloads, where AHB savings of 50% or more are common compared to licence-included pricing on AWS or GCP. Organisations with large Windows Server and SQL Server estates should model the licensing cost differential explicitly when making cloud platform decisions.
List all Microsoft licences (Windows Server, SQL Server, Remote Desktop, Office), their versions, and Software Assurance status. Determine which licences are eligible for BYOL and on which cloud platform. Map each workload to the target cloud platform and the licensing approach (BYOL or provider-included). Evaluate PaaS alternatives that could eliminate VM licensing requirements entirely. Calculate cost comparisons for each workload across Azure, AWS, and GCP including licensing costs.
Ensure cloud teams select the correct BYOL or AHB options when provisioning VMs. A misconfigured deployment defaults to provider-included pricing. Submit License Mobility verification forms to Microsoft for BYOL deployments on AWS/GCP. Use the 180-day dual-use period on Azure to run parallel environments during testing and cutover. Monitor that on-premises licence usage is retired after the dual-use period expires. Verify that dedicated hosts are provisioned for any Windows Server BYOL on AWS/GCP.
Establish ongoing licence governance for cloud environments. New VMs, scale-outs, and service changes can alter the licensing posture. Regularly audit cloud accounts to verify that Microsoft software deployments match licence entitlements. Monitor Software Assurance renewal dates, as SA lapse terminates License Mobility and AHB rights. Review provider-included versus BYOL economics periodically as pricing and licence holdings change. Consider consolidating Microsoft workloads on Azure if licensing economics justify the platform choice.
Redress Compliance provides independent advisory on Microsoft cloud migration licensing, Azure Hybrid Benefit optimisation, BYOL compliance, audit defence, and contract negotiation. No Microsoft partnerships, reseller relationships, or referral arrangements.
Explore Microsoft Advisory Services →Windows Server and SQL Server are the two most commonly migrated Microsoft products, and they have distinctly different BYOL rules that organisations must understand in detail before planning cloud deployments.
The critical distinction is between Azure and all other cloud platforms. On Azure, organisations with Windows Server Datacenter or Standard licences with active Software Assurance can use Azure Hybrid Benefit to apply those licences to standard shared VMs. Each 16-core licence covers up to 16 cores of Azure VM capacity. Windows Server Datacenter licences provide unlimited virtualisation rights on Azure Dedicated Hosts, mirroring the on-premises benefit. On AWS and GCP, Windows Server BYOL is only permitted on dedicated host infrastructure where the customer has sole tenancy. Standard shared VMs require provider-included licensing at the higher rate.
License Mobility through Software Assurance enables BYOL on shared infrastructure across all cloud platforms, including AWS and GCP, provided the organisation maintains active SA. SQL Server Enterprise licences with SA also qualify for the unlimited virtualisation benefit on Azure Dedicated Hosts, allowing any number of SQL Server instances without per-core licensing. On AWS and GCP, SQL Server BYOL requires submitting a License Mobility verification form to Microsoft, and the organisation must ensure that core licensing calculations account for the physical cores allocated to the VM (not just virtual cores). SQL Server Standard follows the same License Mobility rules but does not include the unlimited virtualisation benefit.
Organisations with active Microsoft Enterprise Agreements should evaluate their EA terms carefully before planning cloud migrations, as the EA may contain provisions that affect cloud licensing economics.
Many EAs include Azure consumption commitments (MACC) or Azure credits that can offset cloud compute costs. Some EAs include specific BYOL provisions or Azure Hybrid Benefit entitlements documented in the agreement’s product terms. Understanding these provisions before migration ensures the organisation captures all available benefits and avoids duplicating costs by paying for provider-included licensing when BYOL entitlements already exist under the EA.
Organisations planning significant cloud migrations should time the migration to align with EA renewal negotiations, where the shifting balance between on-premises and cloud usage can be leveraged to negotiate better Azure pricing, additional Hybrid Benefit entitlements, or more favourable SA renewal terms. Microsoft’s account teams are motivated to demonstrate Azure adoption growth, and organisations that commit to Azure migration timelines during EA negotiations often secure more aggressive discounts.
SA is the key that unlocks both Azure Hybrid Benefit and License Mobility. Without SA, most BYOL options become unavailable. If the organisation plans to migrate most Windows Server and SQL Server workloads to Azure within the next EA term, maintaining SA on those licences is essential for capturing AHB savings. Conversely, if workloads are being decommissioned or replaced with PaaS services that include licensing in their pricing, maintaining SA on those specific licences may represent unnecessary cost. The SA coverage decisions should be made deliberately on a workload-by-workload basis.
It depends on the product and whether you have active Software Assurance. SQL Server and other server applications eligible for License Mobility can be used on AWS/GCP shared infrastructure with active SA. However, Windows Server cannot be used on shared AWS/GCP infrastructure under normal terms. Windows Server BYOL on these platforms requires dedicated host infrastructure. Microsoft classifies AWS, GCP, and Alibaba as “Listed Providers” with specific restrictions that do not apply to Azure or smaller hosting providers.
Azure Hybrid Benefit allows organisations to apply on-premises Windows Server and SQL Server licences with active Software Assurance to Azure VMs, paying only the base compute rate instead of the full licence-included rate. Savings are typically 40–50% for Windows Server VMs and 30–50% for SQL Server VMs compared to standard Azure pricing. AHB can also be applied to Azure SQL managed services.
In 2019, Microsoft introduced restrictions that prevent customers from bringing perpetual Windows Server licences to AWS, GCP, and Alibaba Cloud on shared (multi-tenant) infrastructure. On these “Listed Providers,” Windows Server BYOL requires dedicated host infrastructure. These restrictions do not apply to Azure or to smaller hosting providers. The policy creates a significant licensing advantage for Azure when running Windows Server workloads.
For most BYOL scenarios on third-party clouds (AWS, GCP), yes. Active Software Assurance is required. License Mobility, which enables BYOL for SQL Server and other eligible products on shared third-party infrastructure, requires active SA. Azure Hybrid Benefit also requires SA or equivalent subscription licences. Without SA, the main options are provider-included licensing (paying the full rate) or BYOL on dedicated host infrastructure.
On Azure, yes. Azure Hybrid Benefit includes up to 180 days of dual-use rights, allowing organisations to run the same licensed software on-premises and in Azure simultaneously during migration. This is critical for testing, validation, and cutover. AWS and GCP do not offer equivalent dual-use rights. When using BYOL on these platforms, the licence should technically be decommissioned from on-premises use when deployed to the cloud.
From a licensing economics perspective, Azure is consistently the most cost-effective platform for Windows Server and SQL Server workloads due to Azure Hybrid Benefit, dual-use rights, free Extended Security Updates for end-of-support products, and the absence of Listed Provider restrictions. Many organisations report 20–40% lower total cost of ownership for Microsoft workloads on Azure compared to AWS or GCP. However, the platform decision should also consider technical requirements, existing cloud relationships, and non-Microsoft workloads.
If Software Assurance lapses, License Mobility rights and Azure Hybrid Benefit eligibility expire. The organisation must either renew SA, switch to provider-included licensing (paying the full VM rate including the licence), or remove the workloads from the cloud. SA renewal costs must be factored into the total cost of ownership for any BYOL cloud deployment to ensure that the BYOL savings exceed the SA renewal costs over the planning horizon.
Independent advisory on Microsoft cloud migration licensing, Azure Hybrid Benefit optimisation, BYOL compliance, audit defence, and contract negotiation. No Microsoft partnerships or referral arrangements.