I, as an owner/computer auditing worker, have been reviewing recent computer usage (for statistics) and happened to stumble across some serious delicate issues. There is an employee who does not have permission to access a certain computer, but has been doing it nonetheless (when "alone" or otherwise "hidden from view") and using it for personal reasons (accessing FB and reviewing his personal mail). He, in one of his escapades, forgot to close his personal FB page and left it open for the night (giving me a chance to overview it in the following morning).
The main issue here is that the worker in question has been found to "chat" about sensitive matters (such as planning to "stiff" ourselves by leaving his work behind "when he gets bored") and about his "unbecoming" behaviour while working (such as drinking our "for sale" liquor and over-mixing drinks to get an extra-shot for himself). All these actions would institute grounds for dismissal, but since he haven't actually found him to be doing them, it is not clear on how to proceed.
The background: This "restricted computer" is a PoS/Server computer for a restaurant, located near the bar area itself. The employee in question is a barman/server who happens to be "alone" at some times by under-staff issues.