If you have created an antispam policy and applied it only on some domains and you do not understand why it is not working on some mailboxes, you must verify that the principal SMTP of those mailboxes is part of the domains set in the antispam policy.

Indeed, only the principal SMTP address of the mailboxes is checked in order to know if the antispam policy has to be applied or not.