Mailbox Permissions Summary

Hello.
Our newly minted Exchange 2k environment has been limited by audit control, such that our client support team must add themselves to the mailbox permissions tab to take over mailboxes for troubleshooting instead of using a master login ID. The problem arises after the break/fix process when our team members close the trouble ticket, and forget to remove themselves from the mailbox’s permissions. This is also an audit issue and one I have been tasked to find a solution for. My question is, are there any tools (free is good!) which can pull from Active Directory a summary of all objects an ID is attached to so we can go back on a periodic basis and clean up any mistakenly attached permissions before they become an issue.
Thanks!