See who has access to databases via AD group membership
just seeing which groups the user is in that also have a login on the instance would be nice
    
  


You can accomplish this using following code:

exec xp_logininfo 'dom\acc', 'all';


Or you can impersonate that login and use sys.login_token like this:

exec as login = 'dom\acc';
select distinct name
from sys.login_token
where principal_id &gt; 0
      and type = 'WINDOWS GROUP';
revert;