Go to HR Tools > HR > Timesheets, open the employee, find the row whose Time Card Schedule ends with "--" (still open), click Edit, enter the correct Clock-out time and Save Timecard. Until this is done the employee cannot clock in to that shift again ("You already clocked in!") and their dashboard keeps showing the clock-out button.