Hi Jess -
My initial thought is that you probably didn't miss a setting, it has more to do with your registration approval. If there were not enough seats left for the event, the group registration should probably have been denied and the registrants asked to request separately so that the two available slots could get filled and the other two put on a waitlist (if your event had a waitlist).
By the registration being approved, the system (I think) will assume that the approver is allowing an exception to be made and for the event to go over capacity. You can check with Cvent support to confirm, but believe that with the approval process in place, that will probably override the capacity settings previously put into place.
Also wondering if for those other programs where you said it hadn't happened before, whether those other programs also had the manual registration approvals in place?
Hope this helps!
------------------------------
Rebecca Yousif
Senior Administrator - Event Technology
------------------------------