Setting Time Punch Restrictions

You can control which computers employees are allowed to use to make time punches. By specifying Internet IP addresses of the computers that employees are allowed to use, you can restrict employee time punch reporting to those computers only.

Notes:

The list of Allowed IP Addresses is used for Employee Time Clock punch restrictions only. To set up activation restrictions for ExponentHR Time Kiosks, use the Time Clock Kiosk Setup utility available in Payroll Management.
Any employee can be made exempt from the time punch IP Address Restrictions by activating the Disable Time Clock IP Restrictions field on the respective employee's personnel record. To see a full list of employees who have been made exempt, click the View Exempt Users in the Site Access IP Restrictions section of the Password Management page.
If you are wanting your employees to be able to record time punches from any computer, but not from the ExponentHR Mobile website, this setting is controlled in the Mobile App section of the Time Clock portion of the Company Configuration tool.

Management is concerned that some employees are erroneously reporting their clock in and clock out times from home. As a result, the organization wants to restrict employees from reporting time outside of the office environment. Using the Time Punch Restrictions section in Password Management, specify the IP addresses of the work computers that employees are allowed to use for time clock reporting.

To set time punch restrictions by location:

1. On the Management Navigation Menu, click Settings > Password ManagementSettings > Password Management.

The Password ManagementPassword Management page displays.

2. In the Site Access IP RestrictionsSite Access IP Restrictions section, select the Activate IP Address Restrictions for Employee Time Punches check box.

3. Use the IP Value Type drop-down list to select how you would like to manage the list of IP Addresses that are permitted.

IP Value Type	Description	Example
Specific 4-segment IP Address	This feature permits the entry of a partial IP string. Do so will automatically filter all IP addresses which match the partial string	Entering a 110.253.190 IP will represent all IPs from 110.253.190.0 – 110.253.190.255
Range of IP Addresses	This feature permits the entry of a range of IPs to the list	Entering a 110.253.190.5-25 IP will represent all IPs from 110.253.190.5 – 110.253.190.25
Range based on CIDR	This feature permits the entry of a range of IPs based on CIDR format to the list	Entering a 192.168.0.1/24 IP will represent all IPs from 192.168.0.0 – 192.168.0.255

4. Type the Internet IP address of the computer where employee time punch reporting is allowed.

Note: If your organization has multiple IP Addresses that start with the same number sequence, you can leave the last box of the IP Address blank (when using the Specific 4-segnebt IP Address option) to automatically capture all neighboring IP Addresses. For example, 041.102.400.--- authorizes the range 041.102.400.000 to 041.102.400.999.

5. Click the Add --> button to move the address to the Allowed IP Addresses list.

6. Click the Save button.

Result: If a user attempts to perform a time punch from a computer that has not been specified in the Allowed list, they will see that the Report Time/Report Hours Only selections are not available.

Note: If you are wanting your employees to be able to record time punches from any computer, but not from the ExponentHR Mobile website, please contact ExponentHR Client Services.