My custom implementation of Microsoft Azure and Office 365 policy was used for testing.

Passwords from tops of Rockyou leak allowed by policy:

    449 Password1
    225 Princess1
    218 P@ssw0rd
    207 Passw0rd
    173 Michael1
    154 p@ssw0rd
    154 j4**9c+p
    144 Blink182
    126 Charlie1
    119 #1hottie