Recently I had an issue with SQL Server permissions and someone not being able to log into one of our development machines.
I knew that the instance had read access for everyone in a specific Active Directory Group. After trying to log in as the user and seeing the issue, I decided I better check if she was added to the group or not.
First thing I did was crack open the ever handy AD Explorer and found that searching for the group, (which took a long time in our environment) did not show me who was members.
I then remembered that there was a command line way to check the users.
So I clicked, Start, Run, typed in cmd.exe and in the command prompt typed:
NET GROUP “group name here” /DOMAIN
The output will show you the group name, the comment about the group and the members of it.