I think they would have thought of that and are likely using MAC addresses and a lookup table tied up Active Server, etc.

Yes, MAC addresses can be spoofed, but that isn't going to be what most employees will do.