"Enforced" is equivalent to "No Override" setting in the ADUC console - it
essentially prevents from blocking settings of this particular GPO on lower
level AD containers. Enabled simply applies the settings on the target AD
container - without additional implications as far as overriding/blocking
are concerned (so they can be blocked, if desired)...
hth
Marcin