I hadn't set up the AD Group Policy for Limit Login, I only saw the entry in the listing. When you asked me where it's set up, I realized that there's a software deployment happening and there's a VB script running that sets up the client side limit login.
There's an MSI that gets deployed called LimitLoginClientSetup.msi. There may be something that can be found on line that will better explain what this product does.
Sorry for any confusion...and I will learn to double check my sources before assuming that my predecessor actually found something useful built into AD without mods.