The way I do this is to create a group called something like "[All posts moderated]" (the name doesn't matter - just choose something that you understand what is does).
Set the "Submit content without approval" permission to "Never" - leave all other permissions as default.
Now you simply add that group to any users who you want to force all of their content into moderation.