Let me clarify, when I said it would be unethical, I meant to do so without cause and/or prior notification of that possibility. Although in some cases just flipping from work station to workstation looking for violaters could be known policy, in which case It is probably stated, as you mentioned, in the AUP