Is is possible to enforce two-factor authentication for all users?

No, an administrator cannot enforce or enable the Two-factor authentication for all users. This needs to be enabled manually by each user.