I also use command prompt for user account issues with a domain. Instead of opening Active Directory here, it's easier to run NET USER <name> /DOMAIN and see what groups the account is a member of, the last time it logged on, when the password expires, and if the account is active/inactive/locked.