Explanation:
Box 1: Windows only
Security baselines in Microsoft Intune are primarily designed for Windows devices and not supported on macOS devices. While Intune supports managing both Windows and macOS devices, security baselines, which are preconfigured groups of settings with best practice recommendations, are specifically for Windows. macOS devices can be secured using other Intune features like device restrictions, OS and software updates, and compliance policies.
Box 2: Windows and macOS
The "Remote lock" device action in Microsoft Intune is supported for both Windows and macOS devices, as part of compliance policies. When a device is deemed noncompliant based on the configured compliance policies, the "Remote lock" action can be initiated to lock the device, preventing unauthorized access.
Reference:
https://learn.microsoft.com/en-us/intune/intune-service/protect/security-baselines
https://learn.microsoft.com/en-us/intune/intune-service/protect/actions-for-noncompliance