If you want to limit where employees can punch in and out both out in the field as well as in the office, you can use two of our features together. Geofences and IP Address Locks. As long as your employees meet either one, they'll be allowed in.
To do that you'll want to first setup your Geofences by going to Settings, Geofences. For more detailed setup you can reference this help article.
You can then setup your IP Address Locks. You can reference this help article to do that.
Now when your employees to go login, they'll be asked to share their location (this is due to the geofence). If they're outside the Geofence but within an IP Address Lock, that's OK, and they'll be allowed in.
If you don't want your employees to be required to share their location, go to Settings, then GPS Settings and you can set the GPS as optional on a per employee basis.
*** Your employees will be required to share their location because of the geofence. If you don't want your employees to be required to share their location, go to Settings, GPS Settings. Then select "Optional" for select employees.