I often use the net user command to have a look at AD groups for a user:
net user
net user /DOMAIN
This works well, howeve
You could parse the output from the GPRESULT command.