Password Policy

Hi,

Under Domain controller security policy — Account Policy — PW Policy I have the minimum password set up to 5 but users still be able to set up PW less than five character. Did I do something wrong?