Track whether a file has been copied

Beyond compare 3 can make a snapshot view of a directory and sub directories of files. later you can compare the snapshot with current files. Beyond compare will show what files have changed and how they are different, content, time/date, etc. you can take snapshot once a day.
while connected to the company LAN admin should be able to connect to her laptop hard drives c$ hidden shares to make snapshot of her profile's documents (desktop, my documents). Compare various folders on her machine compared to folders of documents possibly being copied. if there is a match then they were copied/modified to her laptop.

you would have to consult legal to be sure your company policies include that work machines are not for personal use and content may be reviewed at any time.

Or you can just ask .. confrontation may be unpleasant, but so is clearing up rumors and distrust.
Sending an email reminding employees they should not use computers for personal use and that spot audits of work machines will be conducted on a regular machine maintenance schedule. Hold laptops overnight, probably do not even have to check to discourage future misuse.

The question looks to be abandoned by the user who asked it. If no action is taken within 2 days, a Quomon Moderator will consider closing the question and distributing the points.

The Quomon Team