That is correct. You can test it on a local machine using the exact syntax
shown.
After password is changed, logoff and re-login to verify the change.
Once confirmed, you can deploy this domain-wide via GP for machines that
are part of the domain.
The /domain switch specifies that the account being modified is from the
domain (not local machine). This does not appear to be what you are looking
for.