I'm not really sure why the tool would struggle, it seems like it was made for that use-case: running the command will ssh into each of the listed existing machines, perform some basic sanity checks, upload the new configuration (and packages in case of a system update), and finally atomically update the symlink, thus applying the new policy.
I'll grant you that it seems to require a wizard to operate, or at least write a tutorial and investigate that use-case, but so does most software: I would be clueless in a AD environment, and it would take me a few hours to catch up on some basic concepts.
Now, it hasn't been designed with your specific example in mind (it could have been), so some wizard would most likely need to expose these knobs (lockscreen timeout, password policy)as easily accessible config items.