You could add code to check specific $_SERVER variables to match the installed server... but realistically that could be removed by anyone that knows what they are doing.
There is no real security measure you could employ particularly on sites that can't access the internet. You may just have to depend on clear license terms and the integrity of the organization.