So, I found this neat trick the other day. In linux, we can discover a lot about our local user account using tools like whoami, id, etc. Windows has a baked in feature that is pretty handy.
From the command prompt do: net user <your username> /domain
If you’re a domain admin, you can run this against other user accounts!