The NCM config change templates allow to use all sorts of variables in config change templates. The ability to use these in Policy Rules really ought to be supported for remediation and identification of a violation.
See: A Few Tips and Tricks When Creating NCM Config Change Templates and More Automation in NCM: Usage of Variables and Custom Properties in Command Scripts and Config Change Templates
rob.hock do you agree?