The only way to really rectify this if you don’t trust the client is to query a time service on the internet and store this information instead, without the internet connection, system time and any other mechanisms you place on the client computer can easily be manipulated.