Password processing in Windows Server

I was recently asked why the way Microsoft processes passwords a 9 character password was no different than a 14 digit password. Can anyone explain this?