All the clients would have to be denied the privilege of changing the clock. Otherwise someone could manually change the clock then punch in for the day.

Yes that is possible. If all clients were not allowed to change their clocks. And all clients were synching with the server correctly.