This message was deleted.

That policy affects local accounts not the Azure AD account, so not real effective in a compliance policy

Hmm. So why does it meet requirements when changed to 8 characters?

Default password length for local accounts probably