Answer: Deploy them into a different OU. I had our AD mgmt team create an OU without this policy and once they join.... no prohibiting message. (Thanks Kevin R!)
I have my answer! WHen deploying, simply choose a specific OU to join the machines to. Still VBS
strOU = "ou=ALL WORKSTATIONS,ou=PC Build,dc=MAIN,dc=LOCAL"
Set this OU to NOT have the login screen.