Is Multi-Factor Authentication (MFA) enabled for all user and administrator accounts?

Microsoft research shows MFA blocks over 99% of automated account compromise attacks by requiring a second verification step.