track when person changes time on 95/98

Ok…..We have a time and attendence program on our NT 4.0 network (we are in the process of going to Win 2000 server). We have Win 95/98 workstations that will be running in a Citirx envorornment. We have some employees that we suspect of changing the time on the PC to an earlier time then using the time and attendance program that uses the PC time to clock in then the change the PC time back. Pretty stupid?? Is their a way to track this on an WIN 95/98 machine so we can catch tehm? If not, Ihave seen programs that you can load on a PC to track every key stroke but I can not find out what company it is? Can anyone help or have an ideas? THANKS