It depends on the settings you want to "lock down".
Basically anything you can configure through script/commandlineon on a client locally, you can try with HPDM to send those command remotely.
We already have successful stories like updating BIOS with HPDM, capture BIOS setting file and deploy to rest clients with HPDM, etc.