Employees can only punch in/out from the IP Address that you specify
Create a new IP Address Lock.
Specify the IP Address that the employee must use. (typically best in an office setting)
Select the employees that this will apply to & save.
Create as many IP address locks as you would like. If an employee is not assigned to one, they can punch in/out from any IP.