We're running 16.3.6572.  I imported 20 users into a domain and went through and manually set their passwords.  The only password complexity requirement we have is 5 letters and not their user name.   I also have skip enforcement for existing passwords enabled.  When I try to log in as any user I created it tells me that their password doesn't meet the requirements and makes me reset them.  I want them to keep the passwords I set.