Enforce 2FA across all mailboxes

We'd like to require two-factor for everyone on the account, set as a policy by us rather than per user. It's a compliance thing for us.