When do password policies apply?
There is a small delay after editing the policy. You can force it by
systemctl restart univention-directory-policy
The policy will apply only to new passwords! Existing passwords are not covered by the new policy. You user has to change it’s password in order to get the new policy applied.