Are Virtual Machine files and history inaccessible from domain connected host computer

I’m a director of technology, and have served as a network admin a number of years ago but I know things have changed. The culture of our current organization is one that network admins like to police our own IT staff including myself. I’m not sure that they literally check my browsing history or files but I do check my personal email on my company provided laptop after 5pm however I do know it’s a company laptop that’s on our AD domain. If I created a VM on the laptop and encrypted that with a password I’m assuming they wouldn’t have the ability to check browser history or files as that’s technically on an innaccessible VM and not the host itself, correct?

I understand they’d be able to see network traffic over their network but I’m referring to when I take the laptop home and connect it to my network at home where you wouldn’t see the network traffic but only be able to see I’m using for personal purposes at home.