Help....

I have a client that wishes to monitor his employee emails. We have installed Enterprise Proxy but one employee turns it off. He wishes to do this covertly. Any way to make this happen?